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Anew book by Computerworld’s Dan Verton makes the chilling argument that 
terrorists are likely to attack America’s digital economy, yet the private sector 
has done little to protect critical facilities from cyber-terrorism. Page 35 


Microsoft Plans Foray Into 
Web Services Management 


BY CAROL SLIWA 

Microsoft Corp.'s effort to be- 
come a bigger player in the 
systems management market 
will extend to Web services as 
early as next year, but more 
likely around 2006 with the 
next Windows server release, 


company executives disclosed. 


Eric Rudder, senior vice 


president of servers and tools 


| at Microsoft, told Computer- 


world that the company plans 


to have “compelling offerings” | 


to help users both manage 
Web services and use them to 
manage their other systems. 
Start-ups have gotten the 
early jump in the fledgling 
Web services management 
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| market, but new offerings are 


expected by year’s end from 
Computer Associates Interna- 
tional Inc. and Hewlett-Pack- 
ard Co. 

Microsoft plans to enter the 
Web services management 


| field by using technology in a 

| future version of the Windows 
| server operating system and 
Microsoft, page 49 | 





last bastion of OS/2 
| computing, branch 


IBM, Bankers at 
Odds Over OS/2 
Migration Path 


Vendor advises OS/2 users to switch to Linux, 


| but ATM makers are leading push to Windows 





| BY LUCAS MEARIAN 


IBM, which will end support 


| of its aging OS/2 operating 


system after 2006, is recom- 


| mending that OS/2 customers 
| migrate to Linux instead of 
| Windows. 


But there’s little likelihood 
that IBM’s advice will 
be widely heeded. The 


banking, is locked into a Win- 


dows migration strategy be- 


cause the major manufactur- 
ers of automated teller ma- 


| chines are going the OS/2-to- 


Windows route. 
Wells Fargo & Co. began its 


| migration from OS/2 to Win- 


dows three years ago, said 


| Jonathan Velline, senior vice 


president of ATM banking at 


| the San Francisco-based bank. 


MTNA 
Ss 


That move was prompted by 
the expectation that IBM 
would drop OS/2 support, as 
well as by the need to upgrade 
data encryption methods 
{QuickLink 40342], support 
electronic check-image proc- 
essing and provide 
audio services for vi- 
sually impaired users, 
Velline said. 

“Tt’s easier for us if we're 
trying to deliver customer in- 


| formation through our teller 


systems with Windows,” he 
said. The bank has so far re- 
placed 3,800 of its 6,200 ATMs 
with Windows-based systems 


| and expects to complete the 


migration by 2005. Web-en- 


| abled ATMs could eventually 


OS/2 Migration, page 14 


Jobless Push for Visa Reform 


| Conn. activist group 


behind several H-1B, 


| L-I bills in Congress 


| BY PATRICK THIBODEAU 
| WASHINGTON 

The controversial L-1 and H-1B 
| visas 
| gress, in large part because of 
| the activism of a group of laid- 


are under assault in Con- 


off Connecticut IT workers. 

Of the five bills that have 
been introduced this year to 
reform the two visa programs, 
three were written by Con- 
necticut lawmakers. 


“We've heard quite a bit 
from constituents in our dis- 
trict concerned about losing 
their jobs,” said Lesley Silla- 
man, a spokeswoman for Rep. 


| Rosa DeLauro (D-Conn.), who 


is seeking restrictions on L-l 
visa use. 
The group DeLauro has 
been working with, the Orga- 
Visa Reform, page 49 





The world's fastest personal computer. 


The new Power Mac’ G5 is here. It’s the world’s fastest’ personal computer, and the 
first with a 64-bit processor. At its heart are two revolutionary PowerPC G5 processors, 


running at speeds up to 2GHz. And since these are 


Powe c chirp 
werrC G5) ¢ 


The world’s first 64-6 


; ee ia a 64-bit processors, they can access up to 8GB of 


or memory in the Power Mac G5, which is double the 
4-gigabyte memory ceiling of every other PC in the world. The G5 processors also 
have the world's fastest frontside bus, running at 1 gigahertz, which gets data to the 


processor almost twice as fast as the 533-megahertz __ sPECint_rate 2000: Integer calculations 
Dual 3.06GHz Xeon 16.7 
dual 3.06GHz Xeon machine). 3GHzPentium4 103 


bus found in the next-fastest personal computer (a 


In side-by-side speed tests using industry-standard — sPECfp_rate 2000: Floating-point calculations 
Dual 3.06GHzXeon 11.1 
up to 41% faster than both the fastest Pentium 4 and 'S@Haipentuma’sa 


benchmarks, the dual 2.0-gigahertz Power Mac GS is 


dual-processor Xeon workstation. And the results get | /"dependent tests show the Power Mac 
G5 edges out the competition on integer 


even better when using real-world applications: and blasts past them in floating-point 

the new Power Mac G5 runs Photoshop more than twice as fast as the fastest PCs. 
Further tests reveal there are similar gains across a wide range of applications, from 
The PowerPCG5 chipisbased | musicand video to science and mathematics. 


on IBM's highest-performance : 
64-bit supercomputer processors Impressed? We haven't even touched on 


the Power Mac G5's other features. Like its ultrahigh-bandwidth system architecture, 
featuring AGP 8X, PCI-X, FireWire’ 800, Gigabit Ethernet, up to 500 gigabytes (yes, 
that's half a terabyte) of internal Serial ATA storage anda SuperDrive’ 7" = 
for DVD authoring. All inside a stunning, professional-quality | 

aluminum enclosure that features four discrete computer-controlled 

cooling zones for whisper-quiet operation. Together, they make 


the Power Mac G5 a true breakthrough in personal computing. ae. 
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Build a scalable 
data warehouse 

with a single 
point of control. 


SAS’ is all you need to know. 


Only SAS provides a high-impact, low-risk way 
to achieve intelligent data warehousing. You can 
extract, transform and load data from any source, 
across any platform, while assuring quality. 
Simplify the way you create and customize reports. 
And deliver a shared version of the truth. To find out 
how top companies reap bottom-line rewards with 
SAS software—by leveraging the value of data 
from corporate systems, e-business channels, the 
supply chain and beyond—visit us on the Web or call 
toll free 1 866 270 5727. 


www.sas.com/warehouse 


The Power to Know, \ySas. 


‘SAS and ali other SAS Institute inc. product or service names are registered trademarks or trademarks of SAS institute inc. in the USA and other countries. ® indicates USA registration. © 2002 SAS Institute Inc. Ali rights reserved. 212324US.1102 
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Catering to True-blue Customers 
In the Management section: More companies are using cus- 
tomer loyalty software to track the patterns of repeat customers 
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IT Drives Volkswagen’s Autostadt 


In the Technology section: IT is at the heart of 
this automotive theme park’s efforts to provide 
each visitor with a one-of-a-kind experience 
that will eventually translate into the purchase 


of a Volkswagen brand car. Page 23 


and figure out how to hold on to them for the long term. Page 37 
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Oracle will support grid com- 
puting in new database and 
application server releases. 


Microsoft offers Office users 
a new upgrade option. 


The UCITA battle isn’t over, 


even though the law’s sponsor 
has thrown in the towel. 


New privacy headaches 
could be in store for financial 
services companies, thanks to 
a California ballot initiative. 


Grocer Albertsons consoli- 


dates its IT management tools. 


Client-side products help 
strengthen remote-access 
security systems. 


The Postal Service pursues 
plans for “intelligent mail,” 
despite privacy concerns. 


Avaya races to set up a net- 
work for the Women’s World 
Cup soccer tournament. 


Telecom provider ups and 
downs: MCI wins approval 
of its settlement of fraud 
charges, but Sprint may be 
banned from competing for 
government contracts. 


The speed and reliability of 
online banking sites varies 
widely, a study shows. 


The securities industry needs 
a jolt to revive enthusiasm for 
straight-through processing of 
stock trades. 


IT execs lack project manage- 
ment skills, one reports finds. 





26 Piecing Together the Data 
Picture. Data quality goes 
beyond data cleansing and 
transformation; it can be cru- 
cial to the success of CRM 
and ERP applications. 


QuickStudy: RosettaNet. This 
emerging set of XML-based 
standards iets companies 
align processes with those of 
trading partners. 


30 Case Study: Averting an IT 
Collision. Liberty Northwest 
used Web-to-host technology 
to integrate its IT infrastruc- 
ture after an acquisition. 


32 Security Manager’s Journal: 
No Denying New Switch Vul- 
nerability. Mathias Thurman 
tries to resolve a denial-of- 
service vulnerability with min- 
imal disruption to his company. 


MANAGEMENT 





35 Book Excerpt: Black Ice. In a 


new book, Computerworld’s 
Dan Verton says the private 
sector is in denial about seri- 
ous cyberthreats. 


38 Q&A: Add One CIO and Mix 
Well. After a big financial scan- 
dal, Tyco picks Dana Deasy as 
its first corporatewide CIO. His 
mission: integrate the systems 
of disparate business units. 


: 39 Q&A: Global Laboratory. 

: HP’s “i-communities” initia- 
tive brings technology to un- 
developed countries, says the 
company’s Debra Dunn, who 
wrote an article about it in the 
Harvard Business Review. 


8 On the Mark: Mark Hall re- 
ports on an antispam service 
that relies on “luckless” folks 
in India who have to read 
every piece of e-mail caught 
in a filter to weed out the false 
positives. 


20 Maryfran Johnson weeds out 
some false positives of her 
own when she cuts through 
the buzz at LinuxWorld to 
find what really matters to 
corporate IT. 


20 Pimm Fox says CRM on the 
road is real, and it’s saving 
companies serious money — 
and maybe making some, too. 


David Moschella casts a 
vote in favor of offshore IT 
outsourcing. 


33 Nicholas Petreley finds un- 
canny resemblances between 
a SCO exec and lawyer and 
two cartoon mice. 


Bart Perkins says careful and 
regular pruning of your IT 
vendors will reduce costs and 
complexity, and he provides 
guidelines for doing it right. 


50 Frankly Speaking: Frank 
Hayes thinks Red Hat’s law- 
suit against SCO may help us 
understand exactly why SCO 
is suing everyone in sight. 
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Offshore Outsourcing 

Not Such a Threat 

CAREERS: Ward Larkin contends that there 
are numerous reasons why the gloom-and- 
doom scenarios that many people are spin- 


ning won’t come to pass. @ QuickLink 40490 


Bringing Value to an IT 

Near You 
DEVELOPMENT: As the fallout from the Inter- 
net bubble settles, look for companies to 
transform their IT departments into lean, 
effective and innovative organizations. 


© QuickLink 40390 


Users Not Quite Ready to Drink 
Their Storage by the Glass 
STORAGE: New metered storage capabilities 
from EMC and Hewlett-Packard show 
promise but haven’t yet won users’ hearts, 
says this article from SNW Online. 

© QuickLink 40385 


Using NAS to Simplify Backups 
STORAGE: Dell Inc.’s Russ Holt takes a look at 
three scenarios where network-attached 
storage offers advantages over older backup 


technologies. @ QuickLink 39850 


Linux 
OPERATING SYSTEMS: This excerpt from 
Linux in a Nutshell describes how to use 


packaging systems. @ QuickLink 40433 
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Breaking News 

© QuickLink a1510 
Newsletter Subscriptions 
© QuickLink 21430 
Knowledge Centers 

© QuickLink a2570 
The Online Store 
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What's a QuickLink? 
On some pages in 
this issue, you'll see 

a QuickLink code pointing 

to additional, related con- 

tent on our Web site. Just 
enter that code into our 
you'll see at the top of 
each page on our site. 
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AT DEADLINE 


Acxiom Confirms 
Breach by Hacker 


Acxiom Corp., which maintains a 
database of information about 
consumers, confirmed that a 
hacker downloaded a smail 
amount of data as it was being 
transmitted between the company 
and some of its corporate clients. 
Little Rock, Ark.-based Acxiom 
said the breach involved a file 
transfer protocol server outside 
its firewall. The company added 
that a former employee of an 
Acxiom client has been arrested. 


Sun to Acquire 
Provisioning Tools 


Sun Microsystems Inc. said it has 
signed a deal to acquire Center- 
Run Inc., a Redwood City, Calif.- 
based developer of application 
provisioning software. Sun didn’t 
disclose the cost of the acquisi- 
tion, which is due to be complet- 
ed by the end of next month. Sun 
said CenterRun will become part 
of its software group and expand 
its N1 data center management 
strategy. 


Antitrust Review 
Ends on Palm Deal 


Palm Inc. in Milpitas, Calif., said 
the antitrust-related waiting pe- 
riod on its proposed acquisition 
of handheld device rival Hand- 
spring Inc. has expired without 
the companies being asked to 
provide more information to fed- 
eral regulators. Palm agreed to 
buy Mountain View, Calif.-based 
Handspring in June [QuickLink 
38997]. The deal is expected to 
close in the fall. 


Short Takes 


San Diego-based software ven- 
dor PEREGRINE SYSTEMS INC. 
said it has completed a Chapter 
11 reorganization and emerged 
from bankruptcy protection. . . . 
BROADCOM CORP. in Irvine, 
Calif., agreed to pay INTEL CORP. 
$60 million to settle a series of 
patent-infringement lawsuits. 


NEWS 


| User interest in upcoming rollouts 
| tempered by reliability, pricing concerns 





| 
| BY MARC L. SONGINI 
T ITS ORACLEWORLD 
user conference in 
San Francisco next 
month, Oracle Corp. 
plans to take the wraps off the 
| next generation of its flagship 
database, which is being up- 
graded to support more exten- 
sive clustering and grid-com- 
| puting capabilities. 
| Oracle last week wouldn't 
| disclose full details about the 
upcoming release. But Robert 
Shimp, the vendor’s vice presi- 
dent of database marketing, 
| said features will be added to 
| make it easier for users to ex- 
ploit grid computing models, 
in which applications are run 
across large numbers of rela- 
tively inexpensive servers. 
The upgrade is being 
dubbed Oracle Database 10g 
| and will be accompanied by 


| similarly named versions of 
Oracle’s application server 
software and Enterprise Man- 
ager tools. The 10g release will 
also include increased scala- 
bility, reliability and security 
capabilities, Shimp said. 

In addition, the three 
products are being developed 
jointly for the first time. Ac- 
cording to Shimp, 
that should result i 
in tighter integra- 
tion and more 
automated self- 
management capa- 
bilities. The soft- 
ware is in beta-test- 
ing; a firm release 
date hasn’t been fi- 
nalized, he said. 

Several Oracle 
users expressed in- 
terest in grid com- 
puting if it lives up 








| Companies planning to up- 
grade to the standard version 
| of Microsoft Corp.’s new Of- 
| fice System applications will 
find a new licensing option to 
| enable them to switch to the 
Professional Edition at a lower 
cost than in the past. 

Microsoft announced last 
week that customers holding 
volume licenses with upgrade 
| rights for Office Standard can 
buy a “step-up license” to get 
| the Professional Edition by 
merely paying the cost differ- 
ential for the license plus the 
Software Assurance mainte- 
nance fee. Under current 
terms, customers must buy 
new licenses to switch. 

Office 2003 is due to ship 
this fall, and the new step-up 
license option will be available 





Microsoft Office Users Get 
‘Step-Up’ License Option 


| BY CAROL SLIWA 


beginning Sept. 1. The option 
will expire after a year. 

Office product manager Si- 
mon Marks said Microsoft is 
offering the step-up license 
because of newly introduced 
differences in functionality 
between the professional and 
standard editions. He said the 
professional version has more 
advanced XML capabilities as 
well as information rights 
management to control access 
to sensitive information. 


Deciding Factors 

| Even Software Assurance 
holders for the Standard Edi- 
tion who don’t buy the step-up 
license will be able to upgrade 
to the professional versions of 
Word, Excel, PowerPoint and 
Outlook with the added XML 
and information rights capa- 








We can’t 
achieve 
ROI by licens- 
ing reserve 
capacity for 
use three 
hours a day. 


HAL KUFF, SYSTEMS AND 
NETWORK MANAGER, TESS- 
CO TECHNOLOGIES INC 





Oracle to Embrace Grid 
Computing in Upgrades 


to the promises being made by 
Oracle and other vendors. But 
they noted that grid technol- 
ogy still faces some potential 
roadblocks, including reliabili- 
ty and pricing concerns. 

For instance, IT staffers at 
the California Public Employ- 
ees Retirement System 
(Calpers) in Sacramento are 
facing tight budgets and might 


} use both Linux servers and 


grid computing products in 
an effort to cut costs, said 
Jack Corrie, divi- 
sion chief of IT 
services at the 
pension fund. 

But he added 
that Calpers offi- 
cials need to do 
their homework to 
make sure that an 
emerging concept 
like grid comput- 
ing is sustainable 
from a technology 
standpoint. 

Hal Kuff, sys- 


bilities. To qualify, they must 
have upgrade contracts in 
force between Sept. 1, 2003, 
and March 31, 2004. 

But they won't get the other 
Professional Enterprise Edi- 
tion components — the Access 
database, the desktop Publish- 
er tool, Business Contact Man- 
ager and InfoPath, a new prod- 
uct that allows users to create 
XML-based forms and submit 


| them to XML-enabled systems. 


Analyst Julie Giera at For- 
rester Research Inc. in Cam- 
bridge, Mass., said Microsoft 
has added a layer of complexity 
that will make it challenging 
for customers to choose the 
right Office version for their 
businesses. “And this choice is 
a really important one because 
a licensing agreement runs 
three years, and migrations 
are expensive,” she said. 

Users with more pressing 
projects said they won’t im- 
mediately upgrade to Office 
2003. Others said they plan to 








www.computerworld.com 


tems and network manager at 
Tessco Technologies Inc. in 
Hunt Valley, Md., said Ora- 
cle’s pricing model is a big 
stumbling block. Although 
Kuff approves of the vendor’s 
technical direction, he said he 
doesn’t see the point of buy- 
ing cheap Linux servers and 
running them in a cluster if 
Oracle is going to charge a 
premium price to license its 
software for each CPU in 
those systems. 

“We’ve been waiting pa- 
tiently for them to evaluate 
their per-CPU licensing model 
in a blade [server]-type of en- 
vironment,” Kuff said. “We 
can’t achieve ROI by licensing 
reserve capacity for use three 
hours a day. Oracle needs to 
make the price right.” For 
Tessco, it now would make 
more economic sense to buy a 
big Unix server, he added. 

“Definitely, the pricing 
models of grid computing 
have been a big question in 
the minds of customers,” 
Shimp acknowledged. Oracle 
hasn’t modified its licensing 
policies thus far, “but we are 
aware of all the questions, 
and we're working on that,” 
he said. D 


upgrade but the new XML and 
information rights capabilities 
won't be the main drivers. 
“We are currently a mix of 
[Windows] 2000 and XP, and 


want to go to one version,” said 


Stanley Johnson, LAN services 
manager for Multnomah 
County, Ore. He said Office 
2003 may be the convergence 
point, but he isn’t sure when. D 


NEW FEATURES 


Word, Excel, Outlook 
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NEWS 


Sponsor’s Surrender Won't End UCITA Battle 


Related licensing issues still expected 


to surface in new vendor contracts 





BY PATRICK THIBODEAU 


WASHINGTON 


UCITA is far from dead in 
David Lewis’ world. The CIO 
of Deseret Mutual Benefits 
Administrators in Salt Lake 
City continues to see the act’s 
provisions — including a ven- 
dor’s right to remotely disable 
users’ software — appearing 
in software contracts he’s 
asked to sign. 

And Lewis said he doesn’t 
expect that to change as a re- 
sult of the decision last week 
by the National Conference of 
Commissioners on Uniform 
State Laws (NCCUSL) to pull 
the plug on its stalled push for 
state-by-state adoption of the 
controversial software licens- 
ing law. 

“I think software licensing 
will be an ongoing battle,” 
Lewis. 

At its annual meeting here 
last week, the Chicago-based 
NCCUSL said it couldn’t over- 
come the “wide-ranging oppo- 
sition” that stymied adoption 
of the Uniform Computer In- 
formation Transactions Act 
(UCITA) beyond its passage by 
Virginia and Maryland in 2000. 

Although it won’t spend any 
more time or money backing 
UCITA, the NCCUSL will 
continue to support it. For that 
reason and others, UCITA will 
remain a force in software 
contract licensing and some- 
thing corporate IT managers 
will have to deal with for 
years, say people on both sides 
of the issue. 

First, UCITA is the law in 
Maryland and Virginia, and 
vendors can choose those 
states as the governing law in 
a software contract, even if the 
vendor and user are located in 
different states. 

Second, in the absence of a 
uniform law governing soft- 


UCITA IN-DEPTH 


To read more on this subject, go to our 
UCITA Special Coverage page 


QuickLink ai690 
www.computerworld.com 


said | 





ware licensing and online con- 
tracting, it will be up to the 
courts to sort out licensing is- 
sues, such as whether licens- 
ing agreements for packaged 
software are enforceable. And 
the courts can use UCITA as a 
blueprint to craft decisions. 

“Tt rem 
said Jean Braucher, a law pro- 
fessor at the University of Ari- 
zona in Tucson. 

Moreover, there’s nothing to 
stop vendors from seeking 
state UCITA adoptions with- 
out the help of the NCCUSL. 

With those rounds incom- 
ing, the Washington-based 
group spearheading opposi- 
tion, Americans for Fair Elec- 


ains a source of law,” 


tronic Commerce Transac- 
tions (AFFECT), will continue 
the battle. “I think we’re going 
to remain vigilant,” said Miri- 
am Nesbit, president of the 
group and legislative counsel 
at the American Library Asso- 
ciation in Washington. 
AFFECT will meet next 
month to plot its course. One 
option is continuing a push for 


so-called bomb-shelter legisla- 
tion intended to prevent ven- 
dors from applying Maryland's 
or Virginia’s UCITA provi- 
sions in another state. Ver 
mont, Iowa, North Carolina 
and West Virginia have adopt- 
ed that preventive legislation. 
Chuck Morton, an attorney 
at Venable LLP in Baltimore 
who helped win Maryland’s 


Why did the NCCUSL decide to end its 
push for state adoptions? The organiza- 
tion, which is funded by the states to craft 
uniform commercial laws, was outgunned 
by a savvy and potent network of lobby- 
ists representing the insurance industry and library groups, in particular. 


Are there concrete examples of the opponents’ effectiveness? A good 
one is the fact that www.ucita.comis the Opponents’ Web site. 


What does this mean for the future of UCITA? The courts will shape 
future licensing rules, but UCITA may well turn out to be a blueprint 


for future decisions. 


New Privacy Rules Could Mean 
Headaches for Financial Services iT 


Ballot initiative, 
judge’s ruling may 
reach beyond Calif. 


BY JAIKUMAR VIJAYAN 
A consumer-privacy-related 
ballot initiative by a political 
group in California could 
complicate matters for finan 
cial services companies that 
are already scrambling to 
comply with other regional 
and federal privacy mandates. 

And just like the recently in- 
stituted California state priva- 
cy law SB 1386 [QuickLink 
39515], the proposed ballot 
measure will have a nationwide 
reach, privacy experts said. 

A group called Californians 
for Privacy Now on July 30 an- 
nounced that it had collected 
more than 550,000 signatures 
supporting a ballot initiative 
that would require financial 
services companies to get ex- 
plicit opt-in permissions from 
consumers before sharing 
their personal information 
with third parties. 

The issue is expected to be 


| LLC 


| voted onina March 2004 bal- 


lot unless a compromise is 
worked out before then. 

The privacy group’s an- 
nouncement came one day af- 
ter a US. District Court judge 
in Oakland upheld sections of 
three San Francisco Bay area 


| privacy ordinances that re- 
| quire banks to get consumers’ 
| permission before giving infor- 


mation to unaffiliated parties. 
Such developments could 


| mean a lot of headaches for fi- 
|; nancial services companies, 
| said Charlene Brownlee, an at- 


torney at Fulbright & Jaworski 
in Austin. 
“The problem when states 


| start enacting legislation in 


sectors already covered by 


| federal legislation is that com- 


panies have to comply with a 
patchwork of laws rather than 
a single, comprehensive set of 


| obligations,” she said. 


Though the federal Gramm- 


Leach-Bliley Act allows states 
| to enact laws that are stronger 
than federal privacy statutes, 


“laws varying from state to state 
create a logistical and expen- 





sive nightmare for companies’ 
that have already spent millions 
on compliance, Brownlee said. 

Opt-in provisions like the 
one being proposed by the 
California privacy group are a 
welcome step, but they need 
to be made 
eral privacy mandate, said 
Michael Overly, a partner at 
Foley & Lardner, a Los Ange- 
les law firm. 

“The problem when you 
have a checkerboard of rules 


is that it becomes incredibly 
43 The problem 
when you have | 
a checkerboard of 
rules is that it be- 
comes incredibly 
hard for companies 


| to figure out and 


keep track of what 
needs to be done. 


MICHAEL OVERLY, PARTNER 
FOLEY & LARDNER 


part of a wider fed- 


COMPUTERWORLD August 11,2003 


adoption of UCITA, said he 
believes the lack of court chal- 
lenges over implementation of 
UCITA in Virginia and Mary- 
land is evidence that the law 
“isn’t as revolutionary as 
either camp would have led 
you to believe.” 

Uniform commercial law 
usually evolves from generally 
accepted businesses practices, 
but neither side in this battle 
agrees on those 

“Few disagree that the cur 
rent Uniform Commercial 
Code is ill-suited for use with 
licensing and other intangible 
transactions,” said Alan Fisch, 
an intellectual property attor- 
ney at Howrey Simon Arnold 
& White LLP in Washington. 
“But for any new uniform 
code to be an effective solu- 
tion, there must be wide- 
spread acceptance of its un- 
derlying principles, which is 
not true of UCITA.” DB 


prac tices. 


hard for companies to figure 
out and keep track of what 
needs to be done,” he said. 

Despite the level of concern 
raised by California’s SB 1386, 
for instance, many companies 
both inside the state and out 
don’t understand its scope or 
what needs to be done to com- 
ply, Overly said. 

Financial services firms in 
California can expect some 
sort of restrictions on the use 
of customer data by mid-2004, 
according to a Gartner Inc. 
note on the ballot initiative. 

Financial services compa- 
nies around the country should 
view these developments with- 
in a state as large as California 
as indicative of a national trend, 
the Gartner report added. 

But instead of trying to 
comply with such laws one 
state at a time, it might make 
sense for companies to com- 
ply with the “strongest state 
legislation” related to privacy, 
Brownlee said. 

Wachovia Corp. in Char- 
lotte, N.C., is doing just that. 

“We are taking the stance 
that if we have to notify anyone 
in California we will do that in 
other states as well,” said Luis 
Suarez, vice president of PKI 
and encryption key manage- 
ment at Wachovia. D 





8 COMPUTERWORLD August 11, 2003 


BRIEFS 


EC Details Microsoft | 


Antitrust Remedies 


The European Commission out- 
lined a series of proposed anti- 
trust remedies against Microsoft 
Corp. and said the company may 
be fined as much as 10% of its 


annual worldwide sales. The com- | 


mission sent Microsoft an updat- 
ed “statement of objections” de- 
tailing alleged monopoly abuses 
by the vendor. Microsoft said it’s 
studying the document “and will 
continue to work toward a posi- 
tive resolution of these issues.” 


Equifax, IBM Sign 
Expanded IT Deal 


Equifax Inc., an Atlanta-based 
company that compiles credit re- 
ports and sells business manage- 
ment tools, said it has expanded 
an IT services deal under which 
IBM manages its mainframes, 
midrange servers and networks. 
The new 10-year contract is glob- 
al in scope and is worth $400 
million, increasing the total value 
of the deal between the two com- 
panies to $800 million. 


Intel May Owe 
$600M in Taxes 


Intel Corp. has been notified by 
the Internal Revenue Service that 


it may have to pay $600 million in | 


back taxes for 1999 and 2000. In 
a regulatory filing, Intel said that 
the IRS is proposing adjustments 
to tax benefits taken by the com- 
pany on export sales and that it 
may make similar claims for sub- 
sequent years. Intel said it dis- 
putes the proposed charges. 


Short Takes 


ASCENTIAL SOFTWARE CORP. in 
Westboro, Mass., announced a 
$106 million deal to buy Mercator 
Software Inc., a Wilton, Conn., 
vendor of application integration 
software. . . . AGILE SOFTWARE 
CORP. in San Jose said it’s buying 
Waltham, Mass.-based Eigner Inc. 
for an undisclosed price, combin- 
ing two makers of product life- 
cycle management tools. 


NEWS 


MARK HALL ®ON THE MARK 
Spam + Outsourcing = 
Peace of Mind... 


... for e-mail users, according to Ashok Kalle, president of Pathway 
Communications in Toronto. He claims that better than 99% of spam 
can be filtered by a combination of his company’s NetPulse appliance, 
which becomes generally available on Aug. 15, and an optional $1-per- 
month-per-mailbox service that employs workers in India who review 
every single piece of spam sequestered from a mail queue by the spam 
filter. “It’s fairly easy for a trained individual to figure out what spam 
is,” he says. “We want to offer another filter layer not to catch spam, 


which the appliance does, but to catch 
false positives.” For anyone who has 
missed an important message due to a 


| has been hacked.” EnCase looks at every 


| sector on a hard drive’s platters and can 


strict spam filter, this could be a big plus. | 


NetPulse is based on the open-source 
Spam Assassin software combined with 
Pathway’s proprietary filtering technolo- 
gy and, of course, those luckless folks in In- 
dia. # Pathway Communications is also a 
vendor of the oft-maligned intrusion-de- 
tection system (IDS). IDSs are widely 
known to send so many 
alerts that network ad- 
mins end up ignoring 
them, which can lead to 
trouble, since some alerts 7 
should be acted upon. 
That’s why Guidance 
Software Inc. in Pasade- 
na, Calif., has come up 
with a product called 
EnCase Enterprise, 
which can receive an 
alert and, according to 
CEO John Patzakis, 
“quickly look at the bi- 
naries that caused the 
alert to see if the system 


identify crackers’ tools, renamed files 
and other telltale signs that something is 
amiss with the drive. Next week the com- 
pany will unveil new features in the 4.15 
upgrade. The most significant is that IT 
security staffs can now scan drives across 
local- or wide-area networks. Previously, the 


| security software had to run locally on 


Bothell, Wash.-based Dex 

c. promises that field service 
technicians with Pocket PCs or 
Windows Tablets will get im- 
CMU LCs) (esce: eae COB tTCL 
end applications such as CRM 
and ERP systems; better work- 
flow operations; new print ser- 
vices with Bluetooth mobile 
printers; and zippier perfor- 
mance, when it ships Dexterra 
Field Service 2.0 late in the third 
Cram me HUME Bate e 


the suspect system. EnCase lets users de- 
termine exactly how a 
file got onto a drive, 
which can be helpful in 
situations where litiga- 
tion is involved. Erased 
files can be recovered 
and “hidden partitions” 
found, claims Patzakis. 
That puts a damper on 
corporate espionage 
and even rogue busi- 
nesses that are using 
company technology, 
such as one unnamed 
customer’s IT workers 
who were caught by 
EnCase augmenting 
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their salaries by running a porn site from 
the data center. Pricing starts at $2,500. # 
Ken Boyd, CIO of the Remedy division of 
Houston-based BMC Software Inc., has 
some advice for IT executives in the 
midst of an acquisition: Don’t let one IT 
group force its ways on the newly 
merged organization. He should know. In 
less than two years, he went through a 
botched acquisition by San Diego-based 
Peregrine Systems Inc. and what he calls 
a successful one by BMC. In fact, he goes 
so far as to say that Peregrine’s strategy to 
force an inferior, albeit corporate, standard 
technology on Remedy was “a contribut- 
ing factor” to the resale of Remedy to 
BMC. What BMC has done right, he says, 
is to pick the best technologies from both 
operations. Also, he says BMC has been 
“more focused on business policies and 
not a desire to control,” which was not 
the case with Peregrine. ® Eric Raymond, 
author of the seminal work on open-source 
technology The Cathedral and the Bazaar, 
has released a “beta” (Version 0.82) of 
his much anticipated book The Art of 
Unix Programming. While not exactly a 
coder call to arms, the book does argue 
that the operating system’s original in- 
tent as a “general-purpose timesharing 
system ... is rapidly receding into the 
mists of history.” Nonetheless, the “peer- 
review-intensive development of freely 
shared source code” philosophy of Unix’s 
adherents is the foundation for open- 
source technologies. Attempts by Unix 
vendors to eschew open-source practices 
have hurt the OS, making Linux “the last 
best hope to fulfill the rebel dreams of early 
Unix days.” His publisher, Addison-Wes- 
ley, expects copies of the manifesto to 


| arrive in bookstores in September. Oh, 


and there are hundreds of pages of in- 
structive text for more apathetic pro- 
grammers who just want to hack the 
system. D 





‘Grocer Consolidates IT Management Tools 


| creasingly hard [to compete],” 
he said. 
But retailers make up a large 





| BY MATT HAMBLEN 
Albertsons Inc. today will an- 
| nounce that it’s close to finish- 


ing a rollout of Marimba Inc.’s 


| desktop and server manage- 


ment software throughout the 
2,300 food and drug retail 
stores it operates in 3] states. 

Albertsons began deploying 
the software in March for 


| tracking IT assets and making 


automated software changes 
to tens of thousands of de- 
vices, including servers, desk- 
top and laptop PCs, and point- 
of-sale terminals, said Kia 





Behnia, chief technology offi- 
cer at Mountain View, Calif.- 
based Marimba. 

Jeff Tibbitts, an IT project 


| manager at Boise, Idaho-based 


Albertsons, said the rollout is 
scheduled to be done by mid- 
September. “Getting a handle 
on our hardware and software 


| is important,” Tibbitts said. 


“We had a variety of automat- 
ed tools and manual processes 
in the past, so this is an effort 
to consolidate all of that.” 

He added that Albertsons, 
which had revenue of $35.6 bil- 





lion in the fiscal year that 
ended Jan. 30, will also use 
Marimba’s software to auto- 
mate the deployment and 
management of antivirus soft- 
ware and security patches. 
Fred Broussard, an analyst 
at IDC in Framingham, Mass., 
said Marimba has struggled 
in the management software 
market against vendors like 
IBM’s Tivoli Software unit and 
Computer Associates Interna- 
tional Inc. “Marimba is in a 
race with the big guys, and 
this is a market where it is in- 


part of Marimba’s user base, 
and Tibbitts said Albertsons 
chose that vendor over Tivoli, 
CA and other rivals because 
its software can scale across 
the grocer’s operations and is 
flexible enough to track vari- 
ous hardware platforms and 
up to 350 applications. 
Albertsons also expects to 
get a return on its investment 
through improved efficiencies 
within ll months of complet- 
ing the Marimba installation, 
Tibbitts said. He wouldn’t dis- 
close the cost of the project. D 
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NEWS 


New Products Bolster 
Remote System Security 


Managers turn focus to client-side risks 





BY JAIKUMAR VIJAYAN 
ISING CONCERNS 
that remote comput- 
ers could compro- 
mise network secu- 

rity are prompting some com- 

panies to lock down such sys- 
tems and enforce strict com- 
pliance with remote access 
security policies. And several 
vendors are stepping up with 
products to help. 

Fremont, Calif.-based Sygate 
Technologies Inc. next week 
will roll out an upgraded ver- 
sion of its Sygate Secure En- 





terprise suite with new func- 
tions for automating and en- 
forcing security policies on re- 
mote systems that are used to 
dial into corporate networks. 
Rival InfoExpress Inc. in 
Mountain View, Calif., later 
this month will roll out a simi- 
lar product with support for 
multiple remote client hard- 
ware types and operating sys- 
tems. And San Francisco- 
based personal firewall ven- 
dor Zone Labs Inc. on July 30 
started shipping Integrity 4.0, 
a centrally managed endpoint, 


| 


or client-side, security suite 
with a component for enforc- 
ing security policies on all vir- 
tual private network-connect- 
ed corporate network users. 

The goal of using such soft- 
ware is to ensure that remote 
workers don’t compromise 
network integrity by using im- 
properly secured systems, said 
Kenneth Tyminski, CIO at 
Prudential Financial in New- 
ark, NJ. 

“To me, it’s all about con- 
trolling endpoint security,” 
said Tyminski. 

“Basically, such products al- 
low you to specify what appli- 
cations, what programs and 





what configurations should be 
available on a [remote] sys- 
tem,” said Jim Kirby, senior 
network engineer at Wells’ 
Dairy in Le Mars, Iowa. 

Prudential has rolled out 
Sygate’s software to 20,000 
employees who either are 
mobile or remotely access the 
company’s networks on a part- 
time or full-time basis. 

Sygate’s agent software, 
which serves as a personal 
firewall, sits on each remote 
device and ensures that the 
right configuration and secu- 
rity settings are in place at all 
times, especially when the 
computer isn’t connected to 
the corporate network. 

The software, for instance, 
can recognize when a remote 
worker’s system is connected 
to the Internet and automati- 
cally shuts down ports and 
functions that could be used 





Postal Service Pursues ‘Intelligent 
Mail’ Despite Privacy Concerns 


Critics decry use 


in antiterror efforts 


BY DAN VERTON 
WASHINGTON 

A presidential commission 
tasked with studying ways to 
make the U.S. Postal Service 
(USPS) more efficient has rec- 
ommended that it work with 
the Department of Homeland 
Security to develop sender 
identification technology for 
all U.S. mail. 

In its final report, released 
July 31, the President’s Com- 
mission on the U.S. Postal Ser- 
vice said sender identification 
technologies such as personal- 
ized stamps that embed digital 
identification information 
would not only improve USPS 
tracking and delivery opera- 
tions, but would also enhance 
the security of the mail system. 

But civil liberties groups 
and even some private-sector 
technologists fear that requir- 
ing what’s being called “intel- 
ligent mail” for all users of the 
postal system is overreacting 
to the terrorism threat. 





Ron Quartel, CEO of Freight- 
Desk Technologies Inc., a 
Dunn Loring, Va.-based com- 
pany that develops technolo- 
gies for the shipping industry, 
said intelligent mail wouldn’t 
likely have much impact on 
commercial mailers because 
most commercial transactions 
are already semipublic. It 
would, however, have a “huge 
dampening effect” on the per- 
sonal use of mail, he said. 

“There are no obvious tech- 
nological barriers to the postal 
commission suggestion,” said 
Quartel. “But do Americans 
really want every facet of their 





lives inventoried by a federal 
bureaucrat? I don’t.” 

The focus on security stems 
from the 2001 anthrax attacks 
that took advantage of the 
anonymity of the mail system. 

The USPS in January formed 
a committee with the help of 
the private sector to begin 
studying intelligent-mail tech- 
nologies and infrastructure re- 
quirements and has since es- 
tablished a corporate plan for 
intelligent-mail implementa- 
tion. That plan includes analy- 
sis of IT infrastructure up- 
grades, such as server consoli- 
dation, that are necessary to 


Like this Canada Post sample, intelligent mail would incorporate data-rich, 
machine-readable markers to make each piece unique and trackable. 
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begin the program. However, it 
is unclear if the USPS plan en- 
visions the mandatory use of 
intelligent mail for all USPS 
customers as the commission 
recommended. A spokesman 
for the USPS said the commis- 
sion report is still under review 
and it would be premature to 
discuss future USPS plans. 

However, the USPS intends 
to award a contract in Novem- 
ber for mobile data collection 
devices that could serve as in- 
telligent mail scanners. 

Ari Schwartz, associate di- 
rector of The Center for 
Democracy and Technology in 
Washington, said intelligent 
mail was created as a commer- 
cial tool to boost efficiency. But 
to use it as a homeland security 
tool raises legitimate privacy 
concerns, Schwartz said. “The 
anonymity of the mail is some- 
thing that the Postal Service 
has been proud of,” he said. 
“The history of the country is 
such that we want people to 
be able to speak anonymously, 
and taking away [anonymous 
mail] altogether does not 
seem to be a good idea.” D 


STAVING OFF IRRELEVANCE 


The presidential commission recommended 
a range of reforms at the USPS: 
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New Endpoint 
Security Produc 


aes 


to download malicious code 
on the system. 

Each time a remote worker 
attempts to access the corpo- 
rate network, a Sygate en- 
forcement server first checks 
with the agent on the user’s 
system and ensures that the 
device meets all policy re- 
quirements such as having 
functioning firewalls, an- 
tivirus software, proper patch 
levels and registry settings. 

“We want to make sure that 
when the machine is connect- 
ed to us, it is in a trusted state 
with all the appropriate pro- 
tections,” Tyminski said. Ma- 
chines that aren’t compliant 
have access blocked until 
remedial action is taken. 

Thomson Corp.’s Medstat 
Group in Ann Arbor, Mich., 
requires all PCs with Internet 
access to run a personal fire- 
wall, antivirus software and a 
program that scans for mali- 
cious activity. The company 
has installed InfoExpress’ 
CyberArmor technology on 
175 remote systems. An en- 
forcement component called 
CyberGatekeeper ensures that 
no one has uninstalled the 
firewall or other protections. 

“Remote users can uninstall 
or stop services on most of the 
software on their PC. In doing 
so, they will not gain access 
to our VPN server or our net- 
work,” said Lee Wolf, a net- 
work engineer at Thomson 
Medstat. D 





www.computerworld.com 


NEWS 


Avaya Rushes to Set Up 
Women’s World Cup Network 


Last-minute move of soccer tourney 
to the US. poses challenges for IT staff 





BY MATT HAMBLEN 

With the SARS virus forcing 
soccer officials to move this 
year’s Women’s World Cup fi- 
nals from China to the U.S. at 
the eleventh hour, workers at 
Avaya Inc. are scrambling to 
set up a promised voice and 
data network in time for the 
tournament. 

The 16-team tournament is 
scheduled to start Sept. 20, 
and Avaya wasn’t given the 
locations of the six stadiums 
being used in the U.S. or the 
final network requirements 
until July 13. Doug Gardner, 
managing director of the 
World Cup technical program 
at Avaya, said that in contrast, 
network preparations had 
been under way in China for 
more than a year before the 
Federation Internationale de 
Football Association (FIFA) 
decided in May to move the 
finals to the U.S. because of 
the SARS outbreak. 

“The relocation has posed 
many significant logistical 
challenges, [but] I am happy to 
report we are on track,” said 
Michael Kelly, head of IT solu- 
tions at FIFA, the sport’s gov- 
erning body. When the deci- 
sion to move the games to the 
U.S. was announced, “Avaya 
sprung into action,” Kelly said. 

Basking Ridge, N.J.-based 
Avaya will reuse much of the 
switching equipment it de- 
ployed for the Men’s World 
Cup finals that were held in 
Japan and South Korea last 


Peer eeesceseeeseseseseseeeseese 





summer, Gardner said. The 
network for that tournament 
supported a total of about 
40,000 devices and 120,000 


connections [QuickLink 31110]. | 


Clay Sutton, a vice presi- 
dent of network consulting at 
Avaya, estimated that the net- 
work needs for the Women’s 
World Cup wiil be about one- 
third what they were for the 
men’s finals, which involved 
32 teams and 20 stadiums. In 
addition to the devices that 
are being reused from last 
year, some new cabling and 
switching gear was ordered 
in July, Sutton said. 

That equipment was due to 


Judge Approves MCI Deal; 


MCI gets OK for 
fraud settlement 
with SEC, denies 


call-routing claims 


BY MATT HAMBLEN 
WorldCom Inc. last week re- 
ceived approval from a U.S. 
bankruptcy court judge for a 
financial fraud settlement deal 
with the Securities and Ex- 
change Commission and de- 
nied in a court filing that it has 
engaged in illegal call-routing, 
as some of its rivals claim. 

Meanwhile, Sprint Corp. 
said the inspector general of 
the U.S. General Services Ad- 
ministration (GSA) has recom- 
mended that the agency con- 
sider barring Sprint from com- 
peting for new federal govern- 
ment contracts, a disclosure 
that came just days after the 
GSA suspended WorldCom’s 
eligibility for additional con- 
tracts [QuickLink 40319]. 

The Sprint case stems from 
a $2.6 million overcharge that 
the company made on a tele- 
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begin arriving late last week 

at Avaya’s network operations 
center in St. Petersburg, Fla. 
Workers at the operations cen- 
ter will monitor the network 
for the duration of the 32- 
match tournament, which will 
culminate in the champion- 
ship Oct. 12 in Los Angeles. 


is installing LANs at six U.S. stadiums for 
ey the upcoming Women’s World Cup, which will host 
16 teams, including Mia Hamm’s U.S. squad. 


communications services con- 
tract with the Department of 


| Justice. A Sprint spokesman 


called the GSA inspector gen- 


| eral’s recommendation “un- 


precedented and totally with- 
out merit” and said the over- 


| charge was the result of an in- 
| advertent billing error. 


Equating Sprint’s error to 
the accounting scandal at 
WorldCom is “outrageous,” 
the spokesman said. He added 
that Sprint had agreed to pay 
the DOJ $5.2 million, twice the 


| amount of the overcharge. 


Jeff Kagan, an independent 
analyst in Atlanta, said the lat- 


| est developments add to the 


confusion for IT managers 
who are weighing network 


| services deals with the major 


telecommunications carriers. 
“With so many charges and 
countercharges, customers 
don’t know the truth now,” Ka- 
gan said. He advised corporate 
users to “sit back and wait for 
the situation to sort itself out,” 
if they can hold off on signing 


| new contracts. 


The judge’s ruling on the 





| The settlement allows a civil 





Avaya also will install one of 
its S8700 switches at the West- | 
in Hotel in Long Beach, Calif., 
where FIFA’s tournament 
headquarters will be located. 
The switch will transfer calls 
from both IP and digital 
phones, Sutton said. The cre- 
dentials of players, team offi- 
cials and other participants 
will be authenticated through 
network connections to FIFA’s 
home office in St. Gallen, 
Switzerland, and links will also 
be set up to U.S. government 
security and immigration sys- 

- tems. In addition, 
mee real-time data will 
be transmitted to a 
broadcast center in 
New York. 

At each of the 
stadiums, Avaya is 
installing wireless 
and wired LANs 
to support the ac- 
creditation of 
players and jour- 
nalists, and to give 
reporters pass- 





Sprint Faces Possible Ban 


settlement deal with the SEC 
was a step forward for World- 
Com, which is now operating 
under its MCI brand name. 


penalty of $2.25 billion that 
was levied against MCI to be 
satisfied by a $500 million 
cash payment and the issuance | 
of $250 million worth of stock 
to the company’s shareholders 
and bondholders when it 


KEY DEVELOPMENTS 


We 


A bankruptcy court judge 
approved the proposed settle- 
MU Me mmr eel 
MCI and the SEC. 
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rma eRe rr 
call-routing scheme are 
se UF ree 


yay aT 
Teeter Brim ery: | 
Ore CMO tect it 
CR ROM nL a) 
OCaml ie (Oe 





13 


COMPUTERWORLD August 11, 2003 


word-based access to a Yahoo 
Inc. Web portal that will pro- 


| vide information about the 


games. Some of the installa- 


tions could take place just 
| days before the start of the 
; tournament, Sutton said. 


Gardner said that wherever 


| possible, Avaya will take ad- 


vantage of existing IT infra- 
structures at the stadiums, 
such as 802.11b Wi-Fi net- 
works that have been set up at 
Gillette Stadium in Foxboro, 


Mass., and Lincoln Financial 
| Field in Philadelphia. 


Avaya paid more than $100 


| million for the right to build 
| the networks for last year’s 


men’s final, the women’s event 


| and the next men’s tourna- 
ment in 2006. Gardner said 


the company hasn’t yet tabu- 
lated what it expects to spend 
as part of this year’s project. 
But he noted that with the lo- 
cation change and the result- 
ing time constraints, the diffi- 
culty of the task rates about an 
8 ona scale of 1 to 10.3 


emerges from Chapter Il bank- 
ruptcy protection. 

But MCI still has the GSA’s 
new contract-suspension and 


| a federal investigation of its 

| call-routing practices hanging 
| over it. The investigation was 
| spurred by complaints from 


competitors that MCI has 
avoided paying them millions 
of dollars in network access 
fees by illegally routing calls. 

MCI said an analysis done 
by an outside law firm showed 
that it has met all legal and 
regulatory call-routing re- 
quirements. The claims to the 
contrary by AT&T Corp. and 
other rivals are “a misuse of 
the bankruptcy process,” MCI 
added. 

AT&T shot back in a new 
legal filing of its own, charac- 
terizing MCI’s contention that 
it was simply looking for the 
lowest-cost routing options as 
deceptive. “We’re talking about 
the difference between shop- 
ping for bargains and shopping 
with somebody else’s credit 
card,” said James Cicconi, 
AT&T’s chief counsel. B 
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Cisco’s 4Q Profit 
Up, Sales Down 


Cisco Systems Inc. reported a 
fourth-quarter profit of $982 
million, up 27% from $772 mil- 
lion a year ago. But revenue in 
the fourth quarter, which ended 
July 26, fell 2% year-over-year, 
dropping from $4.8 billion to 
$4.7 billion. Nevertheless, Cisco 
CEO John Chambers said that he 
is “seeing some very early signs 
that . . . could be interpreted as 
cautiously optimistic.” 


Novell Acquires 
Linux Developer 


Novell inc. said it has acquired 
Ximian Inc., a Boston-based de- 
veloper of Linux desktop applica- 
tions and systems management 
software. The cost of the deal, 
which is part of a plan by Novell 
to increase its focus on Linux, 
wasn’t disclosed. Novell also said 
it will ship a full Linux-based ver- 
sion of its GroupWise messaging 
software by mid-2004. 


Judge Stays Ban on 
BlackBerry Sales 


AUS. District Court judge in Vir- 
ginia issued an injunction barring 
Research In Motion Ltd. (RIM) 
from selling its BlackBerry hand- 
held devices in the U.S. but then 
stayed the ban pending an ap- 
peal. The injunction was sought 
by Arlington, Va.-based NTP 
Inc., which last November won 

a jury decision that Waterloo, 
Ontario-based RIM had infringed 
on U.S. patents held by NTP. 


Short Takes 


At a meeting with financial 
analysts in New York, EMC CORP. 
said it’s on track to be profitable 
in both the third and fourth quar- 
ters. The storage vendor also 
forecast year-over-year revenue 
growth in the midteens for those 
two quarters. .. . STORAGE 
TECHNOLOGY CORP. in Louisville, 
Colo., cut the price of its D-Se- 
ries disk storage subsystems by 
up to 30%. 





users of the open-source oper- 


| online transactions such as 


| dustry solutions development 
| in IBM’s WebSphere division, 


| tions, electronic bank kiosks 


NEWS 


Linux Proponents 
Strike Back at SCO 


IBM, Red Hat file 


separate lawsuits 


BY TODD R. WEISS 
SAN FRANCISCO 
BM AND RED HAT INC. last 
week fired back at The | 
SCO Group Inc. over its | 
campaign against Linux 
vendors and users, ag sep- 
arate lawsuits aimed at 


| thwarting SCO’s efforts to 


LINUXWORLD 


force companies to 
license its Unix- 
ware technology. 

In response, SCO reiterated 
its claim that Linux is an unau- 
thorized derivative of Unix 
and said it will continue with 
its bid to require corporate 


ating system to pay licensing 
fees. Doing so “is the best and 


| clearest course for customers 


to minimize Linux problems,” 
Lindon, Utah-based SCO said. 

But some users at the Linux- 
World Conference & Expo 
— applauded the legal ma- 
neuver by Raleigh, N.C.-based 
Red Hat, which was followed 
later in the week by IBM’s fil- 
ing of a patent-infringement 
countersuit against SCO. 

“It’s good what Red Hat is 
doing,” said Jeffrey Baum, a 
systems administra- 
tor at San Francis- 
co-based Banc of 
America Securities LLC. “IBM 
and everyone else should join 
forces. They need to fight 
these guys tooth and nail [to 
stop] SCO’s illegitimate at- 
tempt to hold people hostage.” 
Banc of America Securities 


| uses Linux on firewalls, e-mail 


, and file transfer protocol 
servers, as well as systems 
running the open-source 
MySQL database. 

George Weiss, an analyst at 
| Gartner Inc., said Linux back- 
ers need to come forward more 
forcefully to counter the blows 
SCO has been dishing out. 

The actions taken by Red 
Hat and IBM may help make 
IT managers more confident 
about the future prospects of 
Linux, said Bill Claybrook, an 
analyst at Aberdeen Group Inc. 
in Boston. “It gives users the 
impression that companies are 
going to fight back,” he added. 

IBM, which was sued by 
SCO in March for allegedly 
breaching its Unix licensing 
contract, claimed in its coun- 
tersuit that SCO has infringed 
on four patents held by IBM 
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and doesn’t have grounds to 
sue companies over their use 
of Linux. Red Hat filed a series 
of complaints charging SCO 
with unfair competition, trade 
libel and other offenses. 

An IT architect at a U.S.- 
based manufacturing company, 
who asked that he not be iden- 


| tified, said that Red Hat's effort 


to stop SCO’s public attacks on 
Linux is “not going to add any 
comfort” for users like him. 
However, his company doesn’t 
plan to put its use of Linux on 
hold, he said. 

Even if SCO prevails in its 
effort to extract license fees 
from corporate users, Linux 
will still be the right choice 
compared with using more ex- 
pensive operating systems, the 
architect added. “If we end up 
having to pay [a fee], depend- 
ing on what it is, we’re still 
saving money,” he said. B 


READ MORE ONLINE 


For full coverage of the SCO/Linux 
controversy, go to our Web site: 


QuickLink a3260 
www.computerworld.com 





Continued from page 1 
0S/2 Migration 


enable customers to perform 


purchasing sports and concert 
tickets, experts said. 
David Kerr, director of in- 


argued against installing Win- 
dows on bank teller worksta- 


and ATMs, claiming that it’s a 
proprietary approach that sti- 
fles competition. 

“Banks, being frugal with 
cash, would prefer to purchase 
from a competitive market- 
place so they don’t get tied toa 
certain vendor. That certain 
company has demonstrated the 
pricing power it has by [sud- 
denly] changing it’s licensing 
model before,” Kerr said, refer- 
ring to Microsoft Corp. 

“I’m not saying this because 
I don’t want Microsoft to be 
successful,” he said. “We don’t 
believe a proprietary product 
is in the best long-term interest 





of our customers.” 


Kerr said IBM customers 
who choose Linux over Win- 
dows as a replacement for 
OS/2 will have functionality 
that’s comparable to that of 
Windows-based systems. He 
noted that Sun Microsystems 
Inc.’s Java 2 Enterprise Edition 
can be used to integrate Linux 
systems with existing back- 
end systems. 

Dan Vermeire, chief tech- 
nology officer at Huntington 
Bancshares Inc. in Columbus, 


| Ohio, said he’s keeping an 
open mind while seeking re- 
quests for proposals to replace 
or upgrade approximately 900 
ATMs. But he expects to de- 
ploy Windows. “Linux does 
have a lot of attractions. Price, 
flexibility, the support IBM 
and other Tier 1 providers are 
giving to it make it a serious 
contender,” Vermeire said. But 
in branch banking, what mat- 
ters is the operating system 
ATMs run on, he noted. 

The two largest ATM ven- 
dors — Dayton, Ohio-based 
NCR Corp. and North Canton, 
Ohio-based Diebold Inc. — 
have both adopted Windows 
as their OS/2 migration paths. 

“Financial institutions that 
buy ATMs have indicated 
Windows is the direction 
they’d like us to go, and in fact 
our competitors are all on 
Windows,” said Phil Kasper, 
assistant vice president for 
marketing at NCR. 

Kasper said NCR is making a 
“drastic” changeover to Win- 
dows this year and will com- 
pletely phase out OS/2 by 2005. 
Keith Lewis, senior marketing 








manager at Diebold, said his 
company still installs OS/2. He 
couldn’t say when Diebold 
would be able to completely 
move off the operating system 

OS/2 was adopted widely in 
the financial services sector 
early on because of its reputa- 
tion for dependability. And 
banks are traditionally squea- 
mish about moving off of any 
system because of concerns 
about losing customer data. 

“Tt’s very reliable, and you 
want it to be reliable and sta- 
ble. OS/2 is doing what we 
want,” said Ron Ferri, a tech- 
nology relationship consul- 
tant at FleetBoston Financial 
Corp. “You could run with that 
for a while, until vendors 
moved off it.” 

Ferri said that as part of a pi- 
lot program, Fleet has replaced 
about 100 out of 3,400 ATMs 
that have been running OS/2. 
The Windows-enabled ATMs 
have high-bandwidth links to 
back-end servers to provide 
customers who use Fleet’s on- 
line banking service with the 
ability to pay bills using Web- 
enabled ATMs, he said. D 
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Straight-Through Processing 


Needs Jump-start, Panel Says 


Lack of deadline and clear ROI stalls efforts 
to fully automate stock trade processing 





BY LUCAS MEARIAN | 
A panel of brokerage officials | 
last week said that straight- 
through processing (STP) ini- 
tiatives have lost a sense of ur- | 
gency at many fi- 

nancial services 

firms because of the 

lack of a compli- 

ance deadline and 

the difficulty of convincing 
corporate executives that the 
systems will yield a return on 
investment. 

The panelists who took part 
in the discussion, which was 
hosted by the Securities Indus- 
try Association (SIA) in New 
York, added that efforts need 
to be made to rejuvenate en- 
thusiasm for automating the 
end-to-end processing of stock 
trades via direct connections 
between the back-end systems 
at different brokerages. 

Some of the front-end trad- 
ing process is still handled via 
phone and fax, and trade 
settlement systems still rely 
on batch processing. Until July 
2002, the SIA was pushing for a 
mid-2005 deadline for switch- 
ing to next-day settlement of 
all trades, a mandate that 
helped spur the adoption of 
STP technology. But the trade 
group then dropped the dead- 
line [QuickLink 31538] and de- 
cided to focus solely on STP. 

Without the push toward so- 
called T+1 settlements, though, 
the SIA is in the position of 
having to sell STP on the basis 
of its potential efficiencies and 
cost savings, said John Panch- 
ery, an SIA vice president. 

Some financial services 
firms are skeptical that central 
trade matching, a key compo- 
nent of STP, will ever become a 
reality, he said. The Global 
Straight Through Processing 
Association in Zurich, one of 
two organizations that were 
developing central trade- 
matching engines, folded late 
last year. Only Boston-based 





Omgeo LLC remains as a ven- 


| dor of matching technology. 


David Furlonger, an analyst 
at Gartner Inc., agreed that 
there’s a “degree of cynicism” 

about STP among 

brokerage execu- 

tives. The lack of a 

T+i deadline has 

caused some com- 
panies to pause STP projects, 
Furlonger said, adding that the 
best way to jump-start such 
efforts is to show how they 
can produce a solid ROI. 

But the middleware needed 
to support STP isn’t cheap, 


Banking Web Sites Show 
Big Gaps in Performance 


| chart). The company added 
that the success rate for com- 
| pleting the transaction ranged 


BY LUCAS MEARIAN 
Keynote Systems Inc. last 
week said that an online per- 
formance showdown it con- 
ducted among eight top U.S. 
banks over a two-week period 
revealed a wide disparity in 
the speed and reliability of the 
monitored Web sites. 

The average time it took to 


| complete an account-balance- 


check transaction on the eight 


| sites varied on a weekly basis 


from 8.16 seconds to more 
than 23 seconds, said San Ma- 
teo, Calif.-based Keynote (see 


E-banking Weekly Index Report 


*Performance times are in seconds 


Base: Average response times measured hourly, Monday through Sunday, 8 am to midnight EDT. 


noted Tim Lind, an analyst at 
TowerGroup in Needham, 


Mass. “If we wait to base all 
| these decisions on cold, hard 


numbers, we’re going to be 
waiting a long time,” he said. 
The number of investment 
management firms using Om- 
geo’s trade-matching engine 
has grown from 19 a year ago to 


| 63 now, said Lee Cutone, the 

| company’s managing director 
| of industry relations. That has 
| resulted in more same-day 

| trade settlements between 


firms and indicates a contin- 
ued interest in STP, he said. 
But Sanjay Vatsa, first vice 


| president of operations for 


global business strategies and 


| solutions at Merrill Lynch & 


| of just 89.07%. 
| resents the first two weeks’ 


| worth of results from an on- 


| announced in May. Chase 
| Manhattan Bank USA and 
| Wells Fargo & Co. had the top 


| tual Inc. and Bank of America 


from a high of 99.91% to a low 


The performance data rep- 


line banking transaction-mon- 
itoring service that Keynote 


two response times each 
week, while Washington Mu- 


| 
| 
| 
| 
| 
| 
| 


| 


8.16 8.29 
8.58 9.48 
11.85 11.64 
12.38 
13.33 
14.07 
17.59 
23.44 
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Findings from a survey of financial services firms 
about STP include the following: 


a Two-thirds said they have launched at least one STP initiative 


or plan to do so by year’s end. 


w@ 49% use direct electronic links to communicate stock trade 


orders to other companies. 


w Nearly 40% have to manually enter data into their systems 
at least twice for the same transaction. 


42% of the Buy and Sell transactions processed by the 
respondents are still paper-based. 


Base: Executives at 184 financial services firms worldwide who were surveyed in April and May. 


SOURCE: GARTNER INC 
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Co.’s investment division, said 
| banks that act as custodians by 
| holding stock and bond certifi- 


cates need to be convinced to 


| set up the same kind of STP- 


capable systems that broker- 

ages are being asked to install. 
Tom Quinn, chairman of the 

SIA’s business practices and 


| matching-implementation sub- 


Corp. brought up the rear, ac- 
cording to Keynote’s automat- 


| ed measurements from 10 


cities. Washington Mutual and 
Bank of America also occu- 


| pied the last spots in terms of 


availability, Keynote said. 
“We subscribe to a variety 


| of monitoring services, and 

| our ranking varies on each re- 
| port,” said Angela Clegg, vice 
| president of the Technology 


Solutions group at Seattle- 
based Washington Mutual. 
“We're working diligently to 
optimize the performance of 
our Web site.” 


| Questions Ratings 


A spokeswoman for Charlotte, 
N.C.-based Bank of America 
said Keystone’s ratings are 
“not consistent with our inter- 
nal data or what we've seen in 
{other] external reports.” She 


| cited a performance-tracking 


study done by Waltham, 
Mass.-based Gomez Inc. that 
gave Bank of America the top 
response-time rating among 


| banks for the period from July 


19 to Aug. 1. 

Keynote measured Web site 
response times and transac- 
tion completion rates during 
the weeks of July 21 and July 
28, after opening an online 
banking account at each insti- 


| committee, said that no matter 

| where a company is on the 
technology curve, “there’s 

| only certain things you're able 
to do unilaterally.” Automated 

| processes for order entry, 

| stock-price comparison, and 
trade affirmation and confir- 

| mation need to be rolled out 

| industrywide, he said. D 


| tution. The company said it 
monitored how long it took to 

| access the banks’ home pages, 

| log into the accounts, check 

| their balances and log out. 

| Brad Adrian, an analyst at 
Gartner Inc. in Stamford, 
Conn., said Keynote appears to 

| have done a good job of factor- 
ing out exterior telecommuni- 
cations network issues and fo- 
cusing on internal Web site 
performance. He noted that 
online transaction speeds can 

| be greatly affected by how well 

| systems and databases are in- 

| tegrated. “The bigger the bank 

| is, the more difficult it can be 

| to tie these systems together in 

| a good way,” Adrian said. 

| Poor online performance 

can hamper customer reten- 

tion efforts as well as attempts 

| by banks to reduce costs, 

| Adrian said. “The worst thing 

| is for a customer to pick up a 

| phone and ask if a transaction 

| went through,” he said. 

| Keynote analyst Roopak Pa- 

tel said end-user authorization 

and data-encryption methods 
can also cause slowdowns in 

response times on Web sites. 

Heavy-duty approaches to au- 

| thorization and encryption are 

“a benefit in terms of security, 

but not in terms of perfor- 

mance,” Patel said. D 
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reduce power 
densities in your 
rack with an 
efficient, cost-saving 
power and cooling 
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availability? 
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More and more IT 
professionals are changing 
from legacy systems to a 
new integrated power and 
cooling solution. 
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Vendors Push File Validation 
Plan as IT Security Measure 


Database will let users 
check integrity of files 
in commercial software 





BY JAIKUMAR VIJAYAN 
A group of vendors led by Tripwire 


| Inc. last week announced plans to de- 


velop a database that IT managers 
could use to verify the authenticity and 
integrity of the files built into pack- 
aged software. 

Hewlett-Packard Co., IBM, RSA 
Security Inc., InstallShield Software 
Corp. and Sun Microsystems Inc. are 
also involved in the File Signature 
Database (FSDB) effort. The reposi- 
tory will store metadata about individ- 
ual files created by each of the ven- 
dors, such as the file’s name, a “born- 
on” date and its digital hash values. 

Corporate users then can check the 
software running on their systems 
against the “good file” information 
contained in the FSDB to make sure 
that files haven’t been improperly 
modified or corrupted by viruses, said 
Wyatt Starnes, president and CEO of 


| Portland, Ore.-based Tripwire. 


| initiative,” said Ken Tyminski, chief in- 


| tial Financial in Newark, N,J. “It will 
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data internally are also due in 2004. 

Although some software from ven- 
dors like Sun, IBM and Microsoft Corp. 
lets users verify the integrity of files, 
there currently is no common way for 
users to do so across multivendor ap- 


plications, Starnes said. 
The FSDB plan sounds like “a great 


formation security officer at Pruden- 


give people the ability to ensure the 
code they have is really the right code,” 
he noted. “If you think something is 
not at the right level or has been al- 
tered, you can look it up.” 

Doing that now involves going to 
multiple sources to get the correct file 


www.computerworld.com 


information, Tyminski said. He added 
that he hopes more vendors join the 
FSDB initiative to further simplify the 
verification process for users. 

Validating the authenticity of files 
could also be helpful from a regulatory 
compliance standpoint, said John Free- 
man, a senior process control systems 
engineer at Pittsburgh-based Bayer 
Corp., the U.S. subsidiary of chemicals 
and pharmaceuticals maker Bayer AG. 

“I’m working in an FDA-regulated 
environment where we’re required to 
maintain change control on all our 
software systems that are used in the 
production of [drugs],” Freeman said. 
“It can be a pretty large job doing that. 
This tool will help simplify and 
streamline that process.” 

The FSDB currently is populated 
with more than 11 million file signa- 
tures from the participating vendors. 


| Each charter member will add new file 


information to the database when soft- 
ware products are released or updated, 
according to Tripwire. 

The initiative is open to all software 
vendors, and Tripwire said the data- 
base will be accessible to any users 
with legitimately licensed applications. 
In addition, the FSDB will be made 
available to government and law en- 
forcement agencies for potential use in 
cybercrime investigations. D 





IT Departments Face a Lack of 
Project Management Know-how 


BY THOMAS HOFFMAN 

More than 75% of 219 

iT SKILLS IT executives inter- 

viewed earlier this 
year by Meta Group Inc. indicated that 
a lack of in-house project management 
skills is a major workforce issue for 
them. But relatively few companies of- 
fer formal IT project management 
training, according to a Meta report. 

The lack of experienced project 
managers is so acute, said analysts 
from Stamford, Conn.-based Meta and 
other consulting firms, that they’re 
waiting to see whether IT-intensive 
regulatory compliance efforts, such as 
meeting the mandates of the Sarbanes- 
Oxley and USA Patriot acts, will lead 
to a resurgence of training efforts. 
Margo Visitacion, an analyst at For- 


| rester Research Inc. in Cambridge, 


Mass., said Meta’s findings mesh with 
her own research. “A lot of unofficial 
training is going on where people take 
on the role of project manager,” Visita- 
cion said. But, she added, “the only 





time there’s been a dedicated effort for 
project management training was Y2k, 
and once that was completed, the mon- 
ey went somewhere else.” 

Providing consistent project man- 
agement training to a technically ori- 





ented staff can be “a challenge,” said 
Mark Reilley, an IT project 
manager at the Corpora- 
tion for Public Broadcast- 
ing (CPB) in Washington. 
He is one of six IT staffers 
who support 125 users at 
the nonprofit company. 

That setup “works well 
on a day-to-day opera- 
tional basis,” Reilley said. 
But when the CPB needs 
to install a new system or 
make major technology 
enhancements, “we tend to struggle, 
he added. The CPB can’t afford to as- 
sign a dedicated project manager to 
each IT initiative and instead relies on 
a system “owner,” meaning an IT 
staffer, to oversee the work. 
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Reilley said some IT technicians 
don’t have all the basic skills needed to 
coordinate projects, but the CPB offers 
them training when possible. In addi- 
tion, Reilley mentors staffers during 
the analysis phase of projects and 
helps them outline an overall plan. 

One of the reasons why many com- 
panies lack project management capa- 
bilities is that they tend to hire IT 
professionals with similar skills, said 
Martin Colburn, chief technology offi- 
cer at the National Asso- 
ciation of Securities Deal- 
ers Inc. in Rockville, Md. 
‘e) To combat that, he said, 

: IT managers should de- 
velop a matrix of the pri- 
mary and backup skills 
they need and then assess 
their strengths and weak- 
nesses “to determine 
where to adjust.” 

Meta’s report, which 
was issued last month, 
said that less than 15% of companies 
polled informally have IT project man- 
agement training programs in place. 
The poll was done separately from the 
report that identified project manage- 
ment shortcomings as a key issue. D 
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Get 
Set... 


Are you set to save space 
and minimize installation 
and maintenance costs 

with a modular manageable, 
pre-engineered architecture? 
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Captain Timothy Riley 
Support Services Division 
City of Newport Beach Police Department 


Many IT professionals have switched 
from an inflexible proprietary system to 
network critical physical infrastructure. 
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InfraStruXure” 
is the Key to 
Stronger NCPI 


by Russell Senesac 


InfraStruXure Product Manager 


APC InfraStruXure™ architecture is the industry's 
new benchmark for on-demand network-critical 
physical infrastructure (NCPI). The foundation of IT 
networks, NCPI consists of power, power distribu- 
tion, racks, cabling, cable distribution, cooling, and 
cooling distribution. Strong NCPI defends your IT 
networks against security and availability problems. 


Complementing these benefits of strong NCPI is 
InfraStruXure's open, adaptable, integrated ap- 
proach, which ensures optimal performance and 
lower upfront and operating costs. InfraStruXure 
fully integrates power, cooling, management and 
services within a rack-optimized design. 


Power 

InfraStruXure architecture features rack-optimized, 
intelligent UPSs and power distribution units that 
are highly manageable, modular, and pre-engineered 
to meet the demands of the smallest wiring closet to 
the largest data center. 


Cooling 

Cooling solutions designed for InfraStruXure are 
extremely flexible, fitting almost any data environment 
as though custom-made, but without the extensive engi- 
neering that traditional cooling systems require. 


Management 

InfraStruXure boasts the industry's only fully integrated 
power management solution. Monitor the elements of 
your data center, understand how your InfraStruXure is 
performing and, when necessary, take action remotely to 
ensure service levels are met—all from a Web browser on 
your desktop computer. You'll be able to maximize avail- 
ability through system-level proactive management. 
InfraStruXure management solutions are easy to use and 
require little to no training. 


Services 

A full menu of professional services, performed by 
APC Global Services experts, supports your 
InfraStruXure architecture. Whether building a new 
installation or retrofitting InfraStruXure into your 
existing IT environment, a range of services is able to 
meet your specific needs. Factory-trained professionals 
commission the elements of your InfraStruXure, 
understand how it is performing and, when necessary, 
take action to ensure optimal service levels are met. 


The Result 

With InfraStruXure, you get the reliability, afford- 
ability and predictability of standard solutions, yet 
completely customized for your specific problems. 
As your requirements change, InfraStruXure easily 
adapts, allowing you to build out or scale back 
capacity as it is required. = 
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OPINION 


MARYFRAN JOHNSON 


Balancing the Buzz 


F IT WERE INDUSTRY BUZZ instead of 
pride that goeth before a fall, Linux would be 
stretched out on the pavement right now with 
a bandage on its beak. That’s how deafening 
the media noise was last week out of the 
LinuxWorld conference in San Francisco. 

Figuring out how much of it matters to corporate 
IT will take a bit of sorting out, of course — particu- 
larly with the legal cloud from SCO’s intellectual 
property lawsuit looming over Linux’s future. 


It was welcome news 
last week when Linux 
vendor Red Hat and IBM 
each counterattacked. 

Red Hat asked for a rul- 
ing on SCO’s copyright 
infringement claims (see 
Frank Hayes’ take on 
that, page 50), while IBM 
accused SCO of violating 
IBM patents. 

But lawyers and legal 
land mines aside, the 
momentum around the 
world’s fastest-growing operating 
system has become a force of nature. 
Consider just a few highlights from 
LinuxWorld and their potential im- 
pact on corporate IT: 

g All of the major vendors, even 
Linux foot-dragger Sun Microsys- 
tems, lined up to make speeches 
about and roll out products for the 
penguin’s followers. Beyond the ma- 
jor server vendors, some heavy hit- 
ters in the systems management 
market also showed up bearing new 
wares (Veritas, Computer Associates 
and BMC, to name a few). With Lin- 
ux making up 26% of all server oper- 
ating systems sold last year (says re- 
search firm IDC), the need for better 
management tools and a wider appli- 
cations portfolio is already acute. 

Impact on corporate IT? Lots of 
choices, lots of support, lots of com- 
petitive pricing — exactly what cor- 
porate customers like to see. 

@ Dell and the National Center for 
Supercomputing Applications an- 
nounced a project to build a Linux 





cluster with 1,450 servers 
that’s able to perform up 
to 177 trillion calculations 
per second. 
Impact? Negligible. 
High gee-whiz factor, but 
no near-term benefits. 
mg IBM and SuSE Linux 
cleared a security hurdle 
by passing a certification 
required by the U.S. De- 
partment of Defense. 
Impact? Swell show-off 
factor for Linux, since 
competitors have been sneering that 
it would never get to this security 
level. Generally good news for secu- 
rity-conscious IT shops (which 
means everybody). 
Yet in the slew of announcements 
last week about Linux, there was one 
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you didn’t hear about (but can read 
about on our front page today). It’s a 
story about how IBM has been quiet- 
ly informing its banking customers 
about the sunset of all OS/2 support 
by 2006 — and directing them to 
Linux as the favored migration path. 
The vast numbers of automated 
teller machines from coast to coast 
mostly run OS/2 under the covers to- 
day, and Big Blue’s fondest hope is to 
keep those longtime customers out 


| of Microsoft’s grasp. By the mid- 


1990s, OS/2 users were at least 6 mil- 
lion strong and as fiercely devoted to 
IBM’s alternative to Windows as, 
well, open-source users are to Linux 
today. But Microsoft has leveraged 
its monopoly dominance on the 
desktop into a significantly stronger 
position in the enterprise now, and 
the banks won't be so willingly guid- 
ed by IBM’s hand this time. Should 
be quite the showdown. 

But what’s more significant here is 


| the way IBM is positioning Linux as 


a bridge from the proprietary past to 
the open-source future. Novell has 
already made Linux the chosen path 
for its migrating NetWare customer 
base, and Hewlett-Packard is march- 
ing in the same direction. 

Now it’s up to corporate IT to 
balance the buzz against real-world 
results. D 


QUICKT, CHANGE 
THE NAME AGAIN. 


www. jkLossner . com 
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PIMM F oe 
Power in 
The Field 


E THINK of sales- 

people as mobile, 

with laptops, cell 
phones and PDAs. But how 
far into the field does your 
CRM system reach? 


Your salespeople should be able to 
order up the rich diet of data inside 
your mainframe applications or taste 
the pleasure of instant entry and ac- 
cess to information from the field. 

A sales call is more powerful when a 
well-trained salesperson uses a hand- 
held device to access pertinent data 
from CRM applications. 

These devices can give sales staffers 
access to an IT feast. And the cost for 
new mobile CRM technology (about 
$1,200 to $1,500 per seat, plus annual 
maintenance costs 
and server licenses) 
is low enough for a 
company like Wil- 
mington, Mass.-based 
UniFirst Corp. to run 
a substantial pilot 
program. 

With 400 salespeo- 
ple, 90 sales man- 
agers and 145 loca- 
tions in the U.S. and 
Canada, UniFirst is 
the third-largest uni- 
form maker in the U.S. It’s moving from 
a form-based system that’s updated 
once a month to a responsive CRM sys- 
tem that’s updated daily to bolster sales 
calls, assist follow-ups and get technol- 
ogy to people who often shun the stuff. 

Now, instead of a monthly green-bar 
paper printout that probably got left in 
the car, sales reps can see the latest in- 
formation with the CRM tool. UniFirst 
uses software from SalesLogix, a divi- 
sion of Best Software Inc. in Scotts- 
dale, Ariz. 

UniFirst worked with Vaultus Mo- 
bile Technologies Inc. in New York to 
get a Java-based client linked to an ap- 
plication server that syncs with the 
corporate sales database. As a result, 
UniFirst has lower costs. Gone: $55,000 
a year for paper, $40,000 for planners 
and calendars, $100,000 for FedEx ser- 
vice. And, of course, the company no 
longer needs data entry people. 

And this is before the sales rep even 
meets with the client. At that point, 
there are more opportunities to save 
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money — and to make more money. 

The UniFirst test has shown a reduc- 
tion in past-due invoices. Moreover, 
managers get their hands on data they 
can use to create calendars, prioritize 
accounts and help the reps sell. 

The daily downloads take three min- 
utes on a link established via a toll-free 
number. Sales reps in six locations are 
testing the system on Jornada and iPaq 
devices. The pilot will expand to all 
400 reps this fall. 

You could also opt to use Tablet PCs. 
They offer far more screen space — 
and power — than PDAs. Trexis Inc. 
in Valley Cottage, N-Y., was able to de- 
velop a CRM system for Tablet PCs us- 
ing SalesLogix’s ActiveX controls to 
develop forms, bringing the CRM ap- 
plication to the Tablet PC. Sure, Tablet 
PCs cost more than PDAs ($2,000 vs. 
$1,300), but if you want to use the de- 
vice for more than one application, the 
power will be handy. 

Like good corporate citizens, you’ve 
cut IT costs. Now it’s time to help 
grow revenue. That’s more difficult, 
but mobile CRM might help. » 


DAVID MOSCHELLA 


Outsourcing 


Is Good 


N THE 1980S, when many 

manufacturers were clos- 

ing U.S. plants and export- 
ing jobs overseas, how did 
you feel? Did you ever think 


that, as painful as it all was, 
the resulting economic, cultural and 
personal upheaval simply wasn’t your 
problem, that this was something that 
happened to other, older industries, 
and that it was really just the normal 
forces of capitalism at work? 

If you did, you were not alone. As 
long as it was automobile, textile and 
even computer hardware makers that 
had to change their ways, software and 
services professionals had the luxury 
of focusing on the long-term benefits 
of globalization. Over the past 20 years, 
it’s been relatively easy to argue that 
increased market competition and im- 
proved business efficiencies eventually 
result in a net economic gain for both 
the U.S. and the world. Given time, this 
is what typically happens. 

But it will be interesting to see how 
well these attitudes hold up, now that 
globalization is challenging the U.S. 
software and services industry itseif. 
While offshore IT projects are certain- 


ly not new, business interest 
in overseas software devel- 
opment, call centers and 
other IT services is acceler- 
ating. Predictably, given to- 
day’s depressed U.S. IT job 
market, shifting work 
abroad has become a con- 
troversial media issue; wit- 
ness the recent New York 
Times front-page story fea- 
turing a leaked audiotape of 
an internal IBM discussion 
about offshore staffing. 

How should the IT com- 
munity react to this impor- _ 
tant trend? First, we shouldn’t be out- 
raged or surprised. The conventional 
wisdom that our increasingly services- 
based economy will be shielded from 
globalization has always been only 
half-true at best. Offshore workers 
can’t fix your car, but many IT services 
are vulnerable to competition. Indeed, 
in many ways, exporting bit-based IT 
work is actually much easier than ex- 
porting work in industries that need to 


worry about physical sup- | 
ply chains, inventories and 
related distribution costs. | 
Aside from the aesthetics | 
of the name, software de- 
velopment could just as 
easily be relabeled as soft- 
ware manufacturing, and | 
increasingly it will be treat- | 
ed as such. The amount of | 
software that the world 
needs is virtually limitless, 
and the idea that this pro- 
duction will remain the 
special preserve of highly 
. » paid U.S. workers is funda- 
mentally silly. Multinational compa- 
nies are supposed to adopt a country- 
neutral, global perspective. For these 
firms, lowering software development 
and customer support costs are per- 
fectly reasonable business objectives. 
Thus, no matter how heated the de- 
bates over U.S. job losses, wage cuts 
and even national security risks, com- 
panies will do what they believe is in 
their interest. The challenge for the 


U.S. IT community is to continue to 


| demonstrate that hiring American soft- 
| ware and services talent is a sound 


business decision. Fortunately, this 
shouldn't be that hard. The potential 
for software innovation is as great as 
ever, and the market will be much big- 
ger than any one nation can handle. 
The bottom line is that no workers 
have benefited more from globaliza- 


| tion than IT professionals. It’s what 


most of our giant corporate networks 
were designed to support. To protest 
that globalization is now harming U.S. 


| IT workers is essentially hypocritical 

| and largely pointless. Global competi- 
| tion doesn’t come with guarantees, but 
| its long-term results are hard to argue 
| with. Software globalization will, on 

| balance, be a good thing, with many 


unforeseen benefits. We should do our 


| best to accept it. D 


"WANT 0% OPINION? 





More columnists and links to archives of previous 
columns are on our Web site 


| www.computerworld.com/columns 





Flexibility Key to 
Managing Projects 


OM POHLMANN, the author of 

the Forrester Research report 
“How Companies Govern Their IT 
Spending,” cites a high rate of fail- 
ure in projects [“Value of Project 
Management Offices Questioned,” 
QuickLink 39998]. At the same 
time, he points out the “process 
cop” mentality that’s present in too 
many project management offices 
(PMOs). Rather than ensuring that 
projects run well, the PMOs get 


bogged down in creating and mon- 


itoring processes. 

My hunch is that these process- 
es are rote activities, put in place 
to satisfy some model or standard. 
As a process improvement profes- 
sional, | have been frustrated when 
working with executives who issue 
mandates to “be CMM Level 3” or 
“become !SO-certified,” often with 
an arbitrary deadline. They then 
brush off their hands and wait for a 
miracle to happen. After all, the 
PMOs will know what to do. 

But it’s no surprise that project 
managers who are expected to do 
someone else's jod would respond 
with a minimalist, policing interpre- 
tation. They will do as little as pos- 
sible until it the entire initiative 


ea ats 


| goes away, or they might even sab- 

otage the project. PMOs could 

benefit from an independent entity 

| that lets them and executive man- 

| agement know how things are 
working: 

| — This entity should be savvy in 

| project management, business 

| management and technical do- 

mains. You don’t want someone in 

this role who is only qualified to re- 

port, “You missed Step 25. Don't 

do it again or I'll tell on you.” | once 

| had aclient who required anyone 

| seeking promotion to management 

to hold this process and product 

assurance role for at least one 

year, and it definitely raised the cal- 

iber of personnel applying for the 

positions. This in turn increased 

| the value of this function. 

What difference would these 

| approaches make on the situation 

| reported by Pohimann? For one 

| thing, processes would become 

tools to help the PMOs ensure that 

| project objectives are met. Out- 

| comes from using or waiving these 

processes would be interpreted 

based on risks and benefits, not 

merely as the ability to check a box 

ona compliance list. Reporting 

of these outcomes would occur in 

a blame-free environment and 

would allow data to flow to the 

PMOs, rather than forcing them to 








go find it. This would allow the | 
PMOs to manage projects, not play | 
process cop. 
Shawn Presson 

Director of organizational 
practice, ITS Services Inc., 
Springfield, Va., 
spresson@itssinc.com 


What Makes 
Projects Run Late 


FOUND THE ARTICLE “Value of 
Project Management Offices 
Questioned” to be interesting and 

thought-provoking. But I'm not 
sure you can assert that process 
impedes the overall delivery date of 
a project. It's my belief that repeat- 
able processes improve the deliv- 
ery rate. In my experience, projects 
are delivered late mostly because 
of poor estimates and delays in re- 
ceiving authorization from senior 
management to complete a phase. 
As far as reports for senior man- 
agement, it's up to those managers 
to determine their frequency, but 
they should factor the appropriate 
amount of reporting into the proj- 
ect budget. 

John Reaves 

Senior project manager, Wa- 
chovia Corp., Charlotte, N.C., 
john.reaves@wachovia.com 





Bye-bye, Jobs 


| SUSPECT offshore outsourcing 
will have a bigger impact than 
Gartner thinks [“Gartner Says 5% 
of Corporate IT Jobs Could Go Off- 
shore by 2005,” QuickLink 

40344]. Once a company has 
started down the path of sending 
jobs overseas, what reason would it 
have for adding new jobs in the 
U.S.? if Gartner is correct about the 
percentage of jobs that will be sent 
overseas, then within 20 years 
there may not be any U.S. IT jobs 
as we know them. And we will also 
need to cut back on the number of 
colleges and universities offering 
computer science degrees. 

David Williams 


Irving, Texas 
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TECHNOLOGY — 


Piecing Together the Data Picture i ) 


Data quality goes beyond mere data 
cleansing and transformation; it can make 
or break a CRM application and even make 
the difference in a company’s survival. 
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Volkswagen’s Autostadt hosts more than 6,000 visitors a 

day. Point-of-information terminals (right) throughout the 
park are just one of the IT innovations geared toward pro- 

viding visitors with ever-changing content. 


Pees 
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Volkswagen’s 

Autostadt shifts 

into systems 
integration overdrive to wow 
theme-park visitors and 
hopefully convert them into 
buyers of Beetles and Bent- 
leys. By Julia King 


IN 1999, VOLKSWAGEN AG’s top executives direct- 
ed Chief Technology Officer Claus Hohmann and 
his IT team to design and build an IT infrastruc- 
ture that would flawlessly support a unique and 
highly customer-centric automotive theme 
park. The idea was to create a spectacu- 
lar and ever-changing marketing venue 
’ where visitors could experience state- 
7 of-the-art automotive technology. Buy- 
ers would pick up their new cars from 
one of the park’s two gleaming 20-story, 
fully automated glass-and-steel towers 
(see photo, left). 

The Autostadt, or “car city,” which is near 
Wolfsburg, Germany, celebrates its third 
birthday this month and has attracted more 
than 6 million visitors. Some 6,000 per day 
have toured its car museum and six brand 
pavilions, which offer a variety of interactive 

and computerized exhibits and Web-based 
point-of-information (POI) terminals. 


They’ve dined in the park’s restaurants 


a ‘ cific processes with those of 
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CASE STUDY 

Averting an IT Collision 

Faced with the need to streamline 
its IT infrastructure after an acqui- 
sition, Liberty Northwest turned to 
Web-to-host technology to bring 
28 its systems together. Page 30 





















stadt 


and bars and shopped in its stores, paying for 
goods and services with computerized stored- 
value cards issued upon arrival. Perhaps most im- 
portant, 349,000 of Autostadt’s visitors have taken 
delivery of new cars. This is the theme park’s key 
success indicator, since its ultimate goal is to 
wow every person who comes through Autostadt 
to the point of buying a new car. 

“We are not a normal corporation where we 
have a headquarters and a shop floor. We are pro- 
ducing adventures and values, “ says Hohmann, 
who came to the Autostadt from Volkswagen's 
Skoda Auto AS unit in the Czech Republic. To do 
that, he says, “we have had to combine different 
worlds.” These include Volkswagen’s mainframe- 
based factory systems, proprietary Unix-based 
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systems that run the car towers, plus 
various packaged and proprietary 
Web-based applications written in Java 
for reservations, customer service and 
multimedia entertainment systems. 

All of this information comes to- 
gether at Autostadt over a three-tier 
information architecture called the 
Integrated Autostadt System (IAS). At 
its center is Vignette Corp.’s V6 Con- 
tent Suite software, which functions as 
the Web-based window through which 
information about car deliveries, event 
bookings and daily ticketing, plus 
reservations for the Autostadt-owned 
Ritz-Carlton Hotel, is drawn together 
(see diagram below). The system pre- 
sents information to Autostadt and 
Volkswagen employees based on their 
predefined roles. 

“This provides optimized process 
support and covers all data protec- 
tion,” explains Bruna. The architecture 
also provides Internet and intranet ser- 
vices that let customers and employees 
access more general information. 

Online interfaces link the Vignette 
server to a centralized Oracle8i data- 
base into which these various back-end 
systems funnel data. The interfaces use 
IBM’s MQSeries middleware and BEA 
Systems Inc.’s Tuxedo transaction 
monitor. Until last month, the Oracle 
database ran on two Sun Enterprise 
4500 database servers with Sun Clus- 


ter 2x software. But Autostadt swapped | 


these out one recent night for Sun Fire 
4800 servers running Solaris 9.0. 

“The migration went so successfully 
and we were done so quickly that we 
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even had to wait for the first test users 
[to come in the next morning],” says 
CIO Michal Bruna. 

Burning the midnight oil on changes 
and fixes is one of the key IT chal- 
lenges as well as a point of pride at 
Autostadt. All software and hardware 


| upgrades and other changes must take 


place after visiting hours. That means 
after 10 p.m., since the park is open 
seven days a week, 52 weeks a year, 
and all systems must operate at 99.95% 
reliability for at least 12 hours per day. 

Preparing for the server swap in- 
volved synchronizing all transactions 
and having the new machines in place 
and tested so they could communicate 
with the network, explains Bruna. Dur- 
ing the cutover, “there’s no Internet, no 
IAS, the Sun environment is dead,” 
Bruna says. 


| Swapping Servers 


The good news is that, thanks to exten- 
sive training of in-house IT staff and 
plenty of hands-on practice, Autostadt 
has been able to cut loose all external 
vendor consultants and contractors 
who helped build the initial Autostadt 
IT architecture. Initially, 20 contrac- 
tors from Gedas, a German systems 
integration firm partially owned by 
Volkswagen, helped develop and 
implement the systems. 

What’s more, Bruna says, because of 
the internal IT group’s expertise, Auto- 
stadt has been able to downgrade ser- 
vice and support contracts with Sun 
and its other hardware providers. 

On the software side, the Vignette 
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CTO Hohmann: Autostadt is ever-changing. 


system functions as the digital heart 
and soul of the IAS and Autostadt as a 
whole. “Vignette is not a solution it- 
self, but it is our development environ- 
ment, our tool kit for making applica- 
tions and an area in which we now 
have huge know-how,” Bruna says. 

He estimates that Autostadt has be- 
tween 500 and 600 templates on its 
Vignette servers. The Vignette system 
has two components: the content man- 
agement system, which runs on two 
Sun Netra T] servers, and the content 
delivery system, which runs on four 
Sun 420 servers. The IT staff includes 


| three full-time Vignette developers, 


who receive two to three weeks of ad- 
vanced Vignette training each year. 

Autostadt began using Vignette 
StoryServer Version 4.2 in June 2000. 
A key selling point was its use of tem- 
plates to separate content and format 
as well as its overall ease of use. Vi- 
gnette developers handle the design 
and associated back-end data calls and 
connections for all templates, which 
nontechnical users can then populate 
with changing Web page content. 

One of the biggest integration chal- 
lenges is negotiating the IAS’s sophisti- 
cated security mechanisms “to pull all 
of the information I need to publish to 
the right people,” says Vignette devel- 
oper Uwe Hollatz. To get production 
manufacturing information from 
Volkswagen’s mainframe system, for 
example, the Autostadt uses RVS, a 
system to share files to authenticated 
users over a remote directory. 

“The data structure of these files is 
known, so I can write a filter in TCL 
[Tool Command Language] to parse 
the files and store the results in our 
Oracle database. From this database, I 
have all the possibilities to publish the 
data to the channels that are needed 
because the Vignette system uses this 
database as the content database for its 
delivery applications,” Hollatz says. 

The Autostadt’s various channels in- 
clude two completely new Web sites, 





the POI terminals scattered through- 
out the park and an intranet. 

The ability to separate content and 
format means that new Web pages can 
be produced quickly and easily, with a 
minimum of specialist skills. This in 
turn allows for more content contribu- 
tors, which Hohmann notes is critical 
to Autostadt’s mission of providing an 
ever-changing venue to Autostadt’s 
physical and digital visitors. 

Since its opening, Autostadt has mi- 
grated to Vignette V6 Content Suite, 
which uses a newer TCL interpreter 
and has several new and improved 
functions, including new services to 
build reports and the ability to dock 
onto a servlet engine such as Apache 
Software Foundation’s Tomcat or 
BEA’s WebLogic to deliver Java appli- 
cations, according to Hollatz. These 
small servlet applications, usually 
written in Java, enhance the display 
and delivery of Web pages. 

The new Web sites include www. 
autostadt.de, where consumers can 
buy tickets, reserve a hotel room or 
learn more about the theme park and 
educational and entertainment events, 
and www.autosphere.autostadt.de, 
which features flash animations, films 
and music for visitors with a high- 
speed Integrated Services Digital Net- 
work or Asymmetric Digital Sub- 
scriber Line connection. Both sites are 
populated with content from the Vi- 
gnette server and were completed by 
the three in-house Vignette develop- 
ers, who worked on them full time for 
six months. 

Guy Crease, an analyst at Boston- 
based Aberdeen Group Inc., says Auto- 
stadt has put a unique twist on content 
management by doing it in sucha 
“strategic marketing fashion.” He also 
describes Autostadt’s “unified ap- 
proach” to content management as 
“quite rare.” Typically, Crease says, 
large organizations have multiple con- 
tent management systems, with differ- 
ent business units, regional offices and 
country groups developing idiosyn- 
cratic sites internally and externally. 

Such a reaction is in line with Auto- 
stadt’s business goal, which is to stand 
out from the crowd by offering visitors 
a one-of-a-kind experience. “The dan- 
ger here,” says Hohmann, “would be 
becoming a normal corporate office.” D 
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In addition to business needs, there 


DATA QUALITY 5 i are now regulatory pressures to main- 


tain better data, Zornes says. “If some- 


TRANSLATES INTO 2 gad f " ¢ 2| one re a ~~ of am- ‘ 
COMPANIES HAVING | ee the US. Department of Homeland Se- 

| ate Bl ~uri vants bs rg it, he says. 
MATION AT THE | tC — io | Tic aso sano Be seaiy 
RIGHT TIMETO i ae eegedpenn alee 
MAKE DECISIONS € gs : 3 a too often they don’t do 

; ; thing < t it.” 
BY SAMI LAIS -- asia a managing director 
Y ere, of CRM at FleetBoston Financial 


a iain i 3 *, ; : | Corp., agrees. “Data quality gets short 
shrift too often. It’s not important until 
you need it,” he says. 

Although in dissimilar industries, 
FleetBoston and Monster both use 
CRM software from Siebel Systems 
Inc. in San Mateo, Calif., and faced 
similar data quality problems. Dupli- 
cate records in customer and contact 
databases meant one department didn’t 
know what another was doing. 

“What we were missing was a total 
picture of the customer relationship. 
We have multiple business sales forces 

following a single customer. It’s hard 
enough to get one business unit’s 


OOR DATA QUALITY 

can confuse your cus- 
tomers, undermine your 
applications or even put 
you out of business — 
and there’s everything 
in the world you can do 
about it. 

More than simple 
data-cleansing, which involves correct- 
ing a misspelled name or changing “Av- 
enue” to “Street,” a data quality initia- | 
tive addresses more complex and sub- 
tle problems. 

For example, one New York bank 





that had a 3% to 5% bad-debt ratio on data clean. We now have 24,” 
its credit card operation acquired an- Eardley says. 

other bank, says Aaron Zornes, a “There’s no consistency 
San Francisco-based analyst at Meta with how users enter cus- 
Group Inc. “It turns out that the ac- tomer and contact records,” 
quired bank had a 15% bad-debt ratio. he continues. “Some people 
The New York bank took over, andthe | use upper- and lowercase; 
bad debt nearly put them out of busi- | others use all uppercase.” 


ness,” he says. 


If the acquiring bank had had a data 
quality initiative to run large database- 
comparison jobs off-line, the problem 
could have been averted, says Zornes. 
Bank managers could have predicted the 
loan default rate by comparing the out- 
standing debt, incomes and even partial 
ZIP codes of the acquired bank’s credit 
card customers against a historical 


database of similar customer profiles. | 

“They would have been able to tell 
that this company wasn’t a good buy,” | 
Zornes says. “Enterprises cannot af- 
ford to wait on data quality efforts.” 

Data quality initiatives are critical to 
enterprise applications such as CRM 
and ERP systems, Zornes notes. And 
according to The Data Warehousing 
Institute in Seattle, data quality prob- | 
lems cost U.S. businesses more than 
$600 billion per year. 

“The basis of any CRM system is the 
integrity of the data,” says Steve Deeb, 
vice president for CRM at Monster 
Worldwide Inc. in Maynard, Mass. “Any 
and all processes are driven by that data.” | 
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Today FleetBoston’s system standard- 
izes the data elements and does ZIP 
code lookups. 

The company opted for data quality 
software from FirstLogic Inc. in La 
Crosse, Wis. Those tools, coupled with 
the Siebel software, “seemed to do ex- 
actly what we needed,” Eardley says. 

To prevent duplicate entries, when a 
user enters a record, the FirstLogic 
system generates a token, which it 
compares to others to see if the data- 
base has similar tokens. If it finds any, 
it shows them to the user to determine 
whether the record is a duplicate. 

“We had to work a little bit to get 
the tokens to our liking, and then it 
worked fine,” Eardley says. “We also 
run batch jobs monthly to identify and 
fix any duplicates.” Any records that 
the system can’t resolve go to the busi- 
ness side for review. 


Monster Problem 

Similar data inconsistencies under- 
mined confidence in Monster’s system, 
says Deeb. Duplicates and unidentified 
accounts in the Siebel system made it 
difficult to know which database to use 
for ordering or invoicing, he says. And 
the sales staff wasn’t getting the sup- 
port it needed. 

Initially, Deeb says, “we didn’t see a 
product that mapped directly into 
what we were doing.” But after build- 
ing its own address-matching applica- 
tion, the company found that it needed 
a more strategic tool and more sophis- 
ticated analysis than its in-house appli- 
cation could offer. 

About a year and a half ago, Monster 
took another look at the field and 
chose the Trillium Siebel connector 
from Trillium Software, a division of 
Harte-Hanks Inc. in Billerica, Mass. 

“When we were looking at the ROI, 
the ease with which the Trillium prod- 
uct could be integrated into our systems 
was attractive,” Deeb says. “We lever- 
aged the strength of the Trillium core 
product — such as the way name and 
address databases from around the 
world can be plugged in — and integrat- 
ed it into our processes in a way that 
made sense to the way we do business.” 

Now, when a record is entered, the 
system evaluates in real time whether 
it’s new or a modification of an exist- 
ing record. The company also runs 
data quality checks in batches to en- 
sure that duplicates aren’t introduced 
when it incorporates a new mailing list 
into its existing database. They’re also 
performed at regular intervals to mini- 
mize data degradation. In addition to 
the IT resources dedicated to main- 
taining data quality, business staffers 
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in one application. 
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transaction-level data; the warehouse hoids summaries and data analyses. 
Best for companies with low operational data latency needs. 
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are also assigned to monitor the sys- 
tem and resolve anomalies. 

It’s the essence of analytical CRM, 
Deeb says. “Real-time analysis to de- 
termine the right offer to the right cus- 
tomer at the right time in a predictable 
manner is driven by the quality of cus- 
tomer data supporting that analysis,” 
he says. 

But most companies believe that 
their data is cleaner and more accurate 
than it is, says Wayne Eckerson, The 
Data Warehousing Institute’s education 
and research director. He cites as one 
example an insurance company that 
each month gets 2 million claims, each 
with 377 data elements. At an error rate 
of 0.1% for all claims data, that’s more 
than 754,000 errors monthly, which 
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amounts to 9.04 million errors annually. 
If 10% of data elements are critical to 
its business decisions, the company 
each year must correct more than | mil- | 
lion errors that could damage its ability | 
to conduct business. Estimating the 
risk cost at $10 per error, poor data 
quality costs the company $10 million 
annually in erroneous payouts. 

“It’s bewildering,” says Eckerson, 
“but almost half of all companies have 
no plan for managing data quality.” Re- 
sponsibility for data quality often rests 
with IT staffers, who make their deci- 
sions based on the tools available. 


Data Quality Means Business 
“First and foremost, data quality is a 
business issue,” says Ted Friedman, an 
analyst at Gartner Inc. in Stamford, 
Conn. “But the solution is the prover- 
bial three-legged stool: people, process 
and technology.” 

The first step in a data quaiity liuitia- 
tive is to analyze: what the data is and 
how it’s used, Friedman says. 

GMAC Mortgage Corp. in Horsham, 
Pa., followed this measured course in 
its data quality initiative. When inter- 
est rates went into free-fall a year and 
a half ago, the first thing the company’s 
CEO wanted employees to do “was 
cope with a 300% to 400% increase in 
daily business of people refinancing 
mortgages,” says David Adams, GMAC’s | 
enterprise data access manager. 

Tuning the Oracle database that sup- | 
ported application processing im- 
proved performance, he says, “but it 
also opened our eyes to the need to go 
further and address the quality of the 
data itself.” And with GMAC begin- 
ning a major overhaul of its data ware- 
house — “actually, it was more a large 
tank of data than a data warehouse,” 
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says Adams — the timing was right to 
launch a data quality initiative. 

“To compete on the other side of the 
refinancing boom, we were going to 
have to have better, cleaner data to get 
the accurate analyses that the CEO 
wanted and that we needed to make the 
most of our operation,” he says. 

Adams brought in a data quality 
consultant to explain to the executive 
council what the project would entail. 
Adams and his team researched the 
data quality tools, ran two pilots and 
then selected software from Ascential 
Software Corp. in Westboro, Mass. The 
Ascential product was more expensive 
and took more work to get going than 
some less sophisticated tools, he says. 
But Adams was sold on the software’s 
heuristic logic, which let it adapt to 
GMAC’s operation. 

“The ETL [extract, transform and 
load] technology is pretty mature, and 
it works well,” says Adams. “But it’s the 
data quality and metadata stuff that’s 
going to give you the great advances.” 

Physically merging databases would 
have required that every division agree 
on a single definition for each data ele- 
ment, which was “probably impossi- 
ble,” Adams says. 

Instead, metadata resides in Ascential 
DataStage and links divisional databas- 
es at the logical level, with “pointers” 
indicating the source of the data. Each 
division’s database remains inviolate. 

Each division can decide what data 
can be shared and with whom, which is 
important for adhering to government 
regulations. Other tools couldn’t deliver 
that granularity of control, says Adams. 

The team installed the software in 
January and, working with the data 
warehousing team, went live in May 
with a relatively small application for 
new credit policy reporting. The first 
large data mart, to support all report- 
ing for GMAC’s wholesale operations, 
will go live Aug. 15. 

“Information is a critical asset,” says 
Meta’s Zornes. “We need to change the 
way we think about it. It may sound 
like science fiction now, but in the fu- 
ture, companies will certify informa- 
tion the way we certify works of art 
and financial instruments, i.e., by as- 
signing that information asset’s value 
and origination.” D 





Lais is a Computerworld contributing 
writer in Takoma Park, Md. 
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DEFINITION 
RosettaNet is an emerging set 
of standards based on XML 
that is aimed at letting busi- 
nesses align specific processes 
with those of trading partners. 


BY RUSSELL KAY 
EMEMBER the 
promise of the 
paperless office? 
Computers com- 
municating elec- 
tronically with one another 
were going to replace the tons 
of paperwork that character 
ized business-to-business in- 
teraction: purchase orders, in- 
voices, payments, confirma- 
tions, documentation — the 
list was nearly endless. Elec- 
tronic document interchange 
(EDI) was going to be the sav- 
ior of our systems and protec- 
tor of our forests. 

It didn’t happen. EDI never 
met the challenges of connect- 
ing scores of propri- 
etary and mission- 
critical applications. 
Now, a new successor 
is stepping up to the 
challenge. 

RosettaNet is both a 
set of standards and a global 
consortium of more than 400 
electronic component, IT and 


semiconductor manufacturing | 


companies working to create, 
implement and promote open 
e-business process standards. 
Founded in 1998, RosettaNet 
aims to align specific business 
processes among trading part- 
ners by defining and standard- 
izing up to 100 e-business 
transaction processes so that 
two companies’ back-end 
systems can talk directly to 
each other. 

RosettaNet takes its name 
from the Rosetta stone, which 
a soldier in Napoleon’s army 
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discovered in Egypt in 1799. 
Since it contained parallel in- 
scriptions in both Greek char- 
acters and Egyptian hiero- 
glyphics, it provided a key 

to deciphering ancient Egypt- 
ian writing. 

This modern electronic 
translator speaks the contem- 
porary languages of computer 
interoperability — XML and 
SOAP — which should allow 
disparate systems and busi- 
ness processes from different 
organizations to understand 
and exchange data with 
one another. 


Defining Processes 
The consortium began its Her- 
culean task by looking 
at supply chain proc- 
esses. Members used 
business-process mod- 
eling to identify the el- 
ements of a working 
business process and 
create a clearly defined model 
of current trading partner in- 
terfaces. After extensively re- 
searching every level of the 
supply chain, as well as ana- 
lyzing misalignments and inef- 
ficiencies, they developed a 
set of generic, standardized 
processes that could serve as 
the basis for real-world busi- 
ness-to-business alignment. 
These Partner Interface 
Processes (PIP) are special- 
ized system-to-system, XML- 
based dialogues. Each PIP 
specification includes a busi- 
ness document and a detailed 
business process that includes 
interaction, data transmission, 
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security and error-handling 
requirements. 

PIPs use two data dictionar- 
ies — one for business proper- 
ties and another for technical 
properties — that help differ- | 
ent companies define the 
same product in exactly the 
same way. The RosettaNet 
Implementation Framework 
defines an exchange protocol, 
and the Message Guidelines 
instruct implementers on how 
to encode individual PIPs into 
specific packages. 

Such efforts at standardiz- 





ing generic processes have 
been tried before and failed. 
RosettaNet, however, seems 
more carefully grounded in 
the real world, and its PIPs are 
tested by consortium mem- 
bers. After consortium part- 
ners have agreed through a 
voting process that a PIP 
meets industry needs, it is 


then published on the Rosetta- 
Net Web site and is available 
for anyone to use. 

PIPs fit into seven official 
clusters, or groups of core 
business processes, that repre- 
sent the backbone of the trad- 


ing B2B network. (There’s also | 


an eighth cluster for adminis- 
trative purposes.) Each cluster 
is broken down into segments, 
which are cross-enterprise 
processes that involve more 
than one type of trading part- 
ner. Within each segment, in- 
dividual PIPs are identified 
according to their place in the 
cluster hierarchy. Thus PIP 
3A4 (request purchase order) 
is the fourth PIP in Cluster 3 


(order management), Segment | 


3A (quote and order entry). 
Here are the clusters: 


0. RosettaNet support: Provides | 


administrative functionality. 

1. Partner product and service 
review: Allows information 
collection, maintenance and 
distribution for the develop- 
ment of trading-partner pro- 
files and product-information 
subscriptions. 

2. Product information: En- 
ables the distribution and 


Using RosettaNet PIPs 
For Order Management 


In this scenario, based on a real implementation by Intel Corp. and one of its 
distributors (www.intel.com/ebusiness/it/solution/wp030602 htm), the use 
of RosettaNet PIPs for standardizing back-end computer-to-computer 
interaction helps eliminate many manual steps. Humans are involved in 
making decisions and changes, but the systems perform validation checks 
and trigger new actions based on previous transactions. 


Purchasing: 


Buyer creates purchase 
order in ERP system. 


Buyer receives purchase 
order change in ERP. 


Buyer initiates pur- 
chase order change 
request in ERP. 


Receiving: 


Buyer receives shipping 
document in ERP. 


Buyer receives 
invoice in ERP. 
Finance: 


Accountant creates pay- 
ment advice in ERP. 


Customer service: 


». Seller receives purchase 
order in ERP system. 


Seller initiates purchase 
order change in ERP. 


», Seller receives pur- 

~ chase order change 
request in ERP. 
Warehouse: 


Warehouse creates ship- 
ping document in ERP. 


Credit issues an invoice 
document in ERP. 


Finance: 


Credit receives payment 
advice in ERP. 
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periodic update of product 
and design information, in- 
cluding product change no- 
tices and detailed technical 
specifications. 

3. Order management: Sup- 
ports the full order-manage- 
ment business area, from price 
and delivery quoting through 
purchase order initiation, sta- 
tus reporting and manage- 
ment. Order invoicing, pay- 
ment and discrepancy notifi- 
cation are also managed using 
this cluster of processes. 

4. Inventory management: En- 
ables inventory management, 
including collaboration, re- 
plenishment, price protection, 
reporting and allocation of 
constrained products. 

5. Marketing information man- 
agement: Enables communica- 
tion of marketing information, 
including campaign plans, 
lead information and design 
registration. 

6. Service and support: Pro- 
vides postsales technical sup- 
port, service warranty support 
and asset management capa- 
bilities. 

7. Manufacturing: Enables the 
exchange of design, configura- 
tion, process, quality and oth- 
er manufacturing floor infor- 
mation to support a “virtual 
manufacturing” environment. 

While interoperability with- 
in a supply chain is a major 
goal, interoperability between 
supply chains is just as impor- 
tant. Few companies are part 
of only a single supply chain; 
most are involved in a number 
of them. The RosettaNet mod- 
el aims to include components 
that are truly universal, recog- 
nizing that some must be 
unique to meet the special- 
ized requirements of specific 
businesses. 

RosettaNet seeks to ensure 
that small and medium-size 
businesses around the world 
can implement a unified ap- 
proach to e-business. D 


Kay is a Computerworld con- 
tributing writer. You can reach 
him at russkay@charter.net. 
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Averting an 
1T Collision 


Insurance company relies on host 
access software to streamline IT 
operations and ease merger integration. 
By Linda Rosencrance 


\ HEN LIBERTY Northwest 


Insurance Corp. acquired | 
| 


North Pacific/Oregon 
Automobile Insurance 
companies last year, it faced a major 
challenge: It needed to central- 
ize its IT infrastructure across 
the merged companies, consoli- 
date multiple emulation plat- 
forms and make it easier to 
adopt new technologies. 

At the time, Portland, Ore.-based 
Liberty Northwest, a wholly owned 
subsidiary of Boston-based Liberty 
Mutual Insurance Co., was primarily a 
workers’ compensation company, 
while North Pacific/Oregon Auto was 
mainly a property-casualty company. 

The problem was they each had dif- 
ferent host-based platforms, says Eric 
Peterson, manager of IT infrastructure 
at Liberty Northwest. 

While North Pacific was using Rum- 
ba software from Cupertino, Calif.- 
based NetManage Inc. in a thick-client 
format, Liberty Northwest was using a 
fledgling version of ZENworks from 
Novell Inc. and a smattering of soft- 
ware from Attachmate Corp. 

After acquiring North Pacific, Liber- 
ty Northwest’s IT infrastructure in- 
cluded a combination of mainframes 
and IBM’s AS/400 systems, as well as 
multiple emulation platforms to access 
these host systems, Peterson says. 

With the merger, Liberty North- 
west’s IT staff had 1,000 desktops to 
manage in multiple locations and was 
responsible for consolidating opera- 
tions, moving offices, moving data cen- 
ters and upgrading all desktops to 
Windows 2000. And the staff had to 
do all that without compromising ser- 
vice and support to its business units 
or its customers. 

“We had to look at how we could 
make our lives easier,” Peterson says. 





And Liberty Northwest wanted to 
make sure that its sales agents and the 
sales agents from North Pacific could 
sell each other’s products, according 
to Peterson. 

Liberty Northwest decided it 
could meet its needs with Net- 
Manage’s Rumba Web-to-Host 
technology, which provides cor- 
porate users with secure, sim- 

ple, browser-based access to applica- 
tions on legacy host systems, says Vi- 
jay Lal, director of product marketing 
at NetManage. 

Using the Web-to-Host technology, 





Liberty Northwest was able to quickly 
and easily deploy the browser-based 
software so host systems could be 
accessed with a click of a mouse, says 
Peterson. It allowed the sales agents 
to access the applications of either 
company over the Internet through 

a browser. 

Rumba Web-to-Host provided 
sales agents with a unified interface, 
whether they were selling products 
from North Pacific or Liberty North- 
west. But the technology also enabled 
the North Pacific sales agents to con- 
tinue using that company’s existing 
interface. 

“Rumba Web-to-Host extends the 
mainframe out to the external world,” 
says Lal. “With mergers or acquisi- 
tions, companies have different sys- 
tems, and each of these systems has a 
system user interface, and you need to 
be able to merge your applications to- 
gether so that the different groups of 
people using the applications are all 
experiencing the same look and feel.” 

Peterson says that if weren’t for the 
ability to centrally configure these 
client sessions, he would have had to 
go around and configure every desktop 
manually or, at the very least, spend a 
significant amount of time on a client 
fix, or reconfiguration, in an automat- 
ed fashion. 

“With this product, I’m able to sim- 


Liberty Northwest’s Streamlined System 


After Liberty Northwest acquired North Pacific/Oregon 
Automobile Insurance last year, it consolidated its IT infrastructure 
using NetManage’s Rumba Web-to-Host technology. 


Liberty Northwest 
IBM mainframe 


Liberty Northwest devel- 
opment IBM mainframe 


Liberty Northwest 
IBM AS/400 system 


Corporate 
IBM mainframe 
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the mainframe out to 


VIJAY LAL, DIRECTOR OF PRODUCT 
MARKETING, NETMANAGE 


ply go to the Web server, change my 
config files, and I’m done,” he says. “We 
centrally administer it, so we can con- 
trol the desktop and the URL for the 
emulation sessions. The only thing we 
allow the users to do is change the font 
colors. If someone needs to use an em- 
ulation session, we can simply e-mail 
them the URL and say, ‘Here you go.’” 


Fewer People Required 


Peterson says that because Rumba 
Web-to-Host is a single platform, Lib- 
erty Northwest saves money, since it 
doesn’t have to maintain, administer or 
purchase multiple emulators. 

“It benefits me because I can keep 
my head count lower,” he says. “I don’t 
have to have three or four techs, or 
have my server guy know three or four 
different platforms. And it’s so quick 
and easy to administer, I only need one 
person and very few disciples.” 

Peterson estimates that he’s proba- 
bly saving the equivalent of one full- 
time employee, or more. 

“When I have a change that impacts 
the entire environment of host sys- 
tems, the number of man-hours I save 
is 300,” Peterson says. “And I also save 
the travel costs to go around and touch 
every desktop. Now I do it in a matter 
of minutes from one location.” 

Lal says the license price for Rumba 
Web-to-Host is $150 per seat. The 
product takes about 30 minutes to in- 
stall and approximately 30 to 90 min- 
utes to configure, he says. 

“Deployment — which happened 
last fall — was extremely fast,” Peter- 
son says. “The beauty of it is the user 
can do it. You point him to this URL 
and say, ‘Click here.’” 

Maximilian Flisi, an analyst at Fram- 
ingham, Mass.-based IDC, says cus- 
tomers are generally satisfied with Net- 
Manage’s Rumba Web-to-Host because 
it’s easy to use and easy to manage. 

“The benefit here is that there is a 
Web interface and there is no need 
for software on the desktop,” he says. 
“Although there are about six other 
vendors in this space, including IBM 
and Attachmate, and they all have 
products that are easily deployable, 
NetManage’s name is one of the ones 
that comes up more often than other 
companies.” D 





Mark Your Calendar! 
STORAGE 


Ute 


WORLD 
October 27-30, 2003 


JW Marriott Grande Lakes Resorte-: 
Tm Orlando, Florida 


4 
a) 


‘ Tony E. Scott 
Chief Technology Offi 
General Mctors ¢ ; 


al 7 S rea age 


Storage Networking World’ Spring 2003 attendees saw solutions from: 


F aw VEEL Bsit) iets) 





Cisco Svatees $BakBone CommVault 
rere ” 


Systems Agilent Technologies a AVA MAR 
oyster ania 

on WcreekPath D@LL axoos (A GET Bent 
— — 


iomega 


soe kasten ¢ @ MaxXxXan 
oy NORTEL 
intel. LEGATO Microsoft it 


; aS NETWORKS 
\ctwork Appliance 


@@ motive Pr 1 Quantum 
= 


PI rm SONY. S70RA8L/TY san “  sanera 
one ne STORAGETEK Sun synesort mT. Pn. @NrH 
were at —— ‘ 


im Di 5 1 


ee 





For information, stay tuned to www.snwusa.com/print 


32 COMPUTERWORLD August 11, 2003 


No Denying N 


TECHNOLOGY 


Switch Vulnerability 


Exploit code demonstrates how easily 
hackers can take advantage of a router 
security hole and launch denial-of-service 
attacks. By Mathias Thurman 


ENDORS of IT security 
products frequently re- 
lease information 
about vulnerabilities 
associated with their software 
and hardware. I receive 15 to 
20 such advisories every day 
and have to examine each one 
to determine whether it’s ap- 
plicable to our infrastructure. 
If the advisory pertains to a 
product we use, I 
must figure out 
whether it affects us. 

That’s not always 
easy. Before making a 
decision, I need to 
know if there have 
been any reported 
compromises and if the ex- 
ploit code actually works. 

I also review who released 
the advisory, the potential ef- 
fect on my company and what 
resources I'll need to mitigate 
the vulnerability. Getting that 
information requires addition- 
al research, but as my recent 
experience shows, that can be 
time well spent. 

Recently, someone released 
code that exploits a remote 
denial-of-service vulnerability 
in any network device from 
Cisco Systems Inc. that runs 
Versions 11x or 12.x of the 
vendor’s Internetworking Op- 
erating System (IOS). 


Researching the Flaw 
Since there was a significant 
amount of information both 
from Cisco and on message 
boards, and the advisory per- 
tained to versions of IOS that 
we run, I needed to do some 
research about the potential of 
this vulnerability. 
Reconfiguring or upgrading 
routers to cope with the prob- 
lem isn’t easy, so I decided to 


find out more about the risks 
we faced and ways we could 


| protect ourselves without 
| causing too much disruption 
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to our operations. 

Just as I started investigat- 
ing the advisory, a colleague 
sent me two e-mails that in- 
cluded code exploiting the 
Cisco IOS weakness. Rather 
than relying on third-party 
opinions, I decided 
to use this code to 
test the vulnerability 
myself. 

To exploit this 
vulnerability, the 
program must send 
a series of specially 


| formatted IP packets with spe- 
| cific protocol types to the in- 
| terface of a vulnerable router. 


When executed properly, 


| the transmitted packets can 
| cause the router to flag the in- 





| put queue as full. When this 


happens, the input queue re- 


| fuses any more packets, caus- 


ing the denial-of-service con- 
dition. 
Network administrators 


| must then reboot the router to 


reset the device and clear the 


| problem. If the router isn’t ac- 


Before making a 
decision, | need to 
know if there have 
been any reported 

compromises and if 
the exploit code 
actually works. 


| 





cessible from the network, 


| someone must go to the data 


center and manually reboot 


the device — which isn’t much | 


fun at 3 a.m. 
The code I received by 


| e-mail wasn’t compiled. I 


transferred it from my desktop 
to a Linux workstation I have 
in the lab and reviewed it for 


| other malicious content. 


Once I had it compiled, I 
needed to find a router to run 
tests on. I talked one of the 


| network engineers into letting 


me borrow a spare Cisco 
router, then asked him to in- 
stall one of the vulnerable ver- 
sions of IOS and configure it 
in a way that should allow the 


| exploit to work. 


For the code to succeed, for 


| example, the Time to Live 


(TTL) setting for network 
traffic has to be less than 2. 
TTL is a value in an IP 


| packet that tells a router 


whether the packet has been 
in the network too long and 
whether it should be discard- 
ed. I was sure that some of our 
routers had TTL settings 
within the vulnerable limits. 


Warnings Validated 


I ran a continuous string of 
packet traffic through the lab 
router while launching the at- 
tack. Within seconds, it 
stopped processing the legiti- 
mate packets and failed, just 
as the advisories had warned. 

By running the “show inter- 
faces” command on the router, 
I was able to see that the input 
queue had indeed filled up. 
And sure enough, the only 
way to reset or clear the input 
queue was to reboot the 
router. 

I immediately sent out an 
advisory to the network team 
suggesting that they schedule 
an emergency inventory of all 
Cisco routers, switches and 
other devices running vulner- 
able versions of the IOS. 





At this point, it looks like 
about 40% of our routers and 
switches are vulnerable. 

It’s difficult to get an exact 
number because many of the 
routers and switches across 
my organization aren’t man- 
aged by our core network en- 
gineering team. Tracking all of 
those devices and determining 
the person responsible for 
each one would be a time-con- 


| suming process, especially 


when the devices are in differ- 
ent countries. 


Mitigation 

Mitigation for this vulnerabili- 
ty requires two actions. The 
networking team must first 


| patch IOS or upgrade it to a 
| nonvulnerable version and 
then configure the access-con- 


trol lists to block the protocols 
that the code uses to attack 
routers. The latter could be 
accomplished either on the 
device itself or on the firewall, 


| which protects the device. 


As I write this, no IOS 
patches are available, but I’m 
sure that by the time this col- 
umn sees print Cisco will have 
released one. That’s good, be- 
cause upgrading IOS on a pro- 
duction router isn’t a trivial 


| task. It normally requires 


hours — sometimes days — of 
lab testing before our engi- 
neers feel confident in up- 
grading. 

While we're preparing to 


| upgrade or patch the systems, 


we've been able to take other 

steps to protect ourselves. For 
example, we obtained enough 
information about the exploit 


| to create intrusion-detection 


system rules to watch inbound 
traffic for signs of attempts to 
launch this particular denial- 
of-service attack. 

It has been a few days now, 
and we haven’t seen any traf- 
fic indicative of this attack. So 
far, so good. D 


WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “Mathias Thurman,” 
whose name and employer have been 
disguised for obvious reasons. Contact him 
at mathias_thurman@yahoo.com, or join the 
discussion in our forum: QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 
@ computerworld.com/secjournal 
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intermediate and seasoned 
systems administrators. 
- Mathias Thurman 


St. Bernard Updates 
Patch Software 


San Diego-based security 
vendor St. Bernard Software 
Inc. last week upgraded its 
UpdateExpert patch manage- 
ment software with new fea- 
tures that include support for 
Hewlett-Packard Co.'s Open- 
View management platform, 
disconnected network support 
and custom reporting options. 
UpdateExpert 6.1 features a 
Smart Plug-in function that al- 
lows the software to be man- 
aged by HP OpenView, and the 
custom reporting option will 
allow companies to conduct 
trend analysis by combining 
machine and patch confor- 
mance report data, said the 
company. The new version of 
UpdateExpert is available now 
and starts at $1,400 for a one- 
year subscription to support 
100 workstations. 
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Sun Microsystems 
Upgrades Solaris 9 


Sun Microsystems Inc. has set 
Aug. 13 as the date when it will 
release its latest upgrade of So- 


laris 9, which will include integra- | 


tion of the GNOME 2.0 desktop, 
the open-source interface used in 
Linux. The upgrade will also in- 
clude improvements to the So- 
laris Live Upgrade feature. Users 
who are part of the Sun support 
plan will get the upgrade free of 
charge; others will pay a fee that 
will depend on the size of the ma- 
chines being upgraded. 


Navy Deploys 
Network Watchdog 


The U.S. Navy’s Office of Naval 
Intelligence (ONI) announced that 
it’s deploying the nCircle IP360 
vulnerability management system 
from San Francisco-based nCircle 
Network Security Inc. ONI will 
use the product to monitor its 
network for vuinerabilities and 
exposures in real time. 


Data Management 
App Gets Upgrade 


Last week, Billerica, Mass.-based 
data management applications 
vendor Trillium Software an- 
nounced Version 7 of its Trillium 
Software System. New features 
include improved user accessi- 
bility and the ability to more 
easily integrate third-party data 
sources. The product is available 
now; pricing starts at $119,000. 


App Helps Manage 
Staff Performance 


Development Dimensions Inter- 
national, a Bridgeville, Pa.-based 
human resources consulting firm, 
and Burlington, Mass.-based per- 
formance management software 
provider Performaworks Inc. have 
partnered to release MaxWorks, 
an online employee performance 
management system. Pricing 
ranges from $15 to $45 per user, 
depending on the number of end 
users licensed. 
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NICHOLAS PETRELEY 


ole 


McBride 


HEME SONG (to the tune of Pinky and the 
Brain, a Steven Spielberg cartoon about 
two genetically altered lab mice who rou- 
tinely try to take over the world): They’re 
Boiesy and McBride, yes, Boiesy and 
McBride. One is a lawyer, the other’s brain’s fried. 
They’re litigation mice, their briefs have been spliced. 
They’re noisy, they’re Boiesy and McBride, Bride, 


Bride, Bride, Bride, Bride! 


Before each night is done, their lawsuits will be filed. 
By the dawning of the sun, they’ll sue your first-born 


child. They’re Boiesy and 

McBride, yes, Boiesy and 

McBride. The threats they 

have tried are business sui- 

cide. But to prove their 

mousey worth, they’ll liti- 

gate the Earth. They’re 

noisy, they’re Boiesy and 

McBride, Bride, Bride, 

Bride, Bride, Bride, Bride, 

Bride, Narf! 

Boiesy: Ooh, what pretty 

curves and lines on the 

whiteboard, McBride! Is 

that a copy of a Pueblo 

Picasso? 

McBride: That’s Pablo, 

Boiesy, and the so-called pretty curves 
and lines before you constitute an 
analysis of how to succeed in busi- 
ness. Here is the equation of supply 
and demand. And over here, you have 
cost of materials and workmanship. 
Then you add the cost of marketing. 
Then, over there, we would divide a 
portion of the estimated profits into 
research and development. 

Boiesy: Egad! Brilliant, McBride! Er — 
no, no. There’s just one problem: 

We don’t do any of those things well, 
do we? 

McBride: Exactly, Boiesy, that’s why 


we're going to take an en- 


tirely different approach to | 
building our business: Sue. | 


Boiesy: Oh, Sue is coming 
to help us? Narf! I like 
Sue! (Sings) If you knew 
Susie like I knew Susie. ... 
(McBride thwacks Boiesy 
on the head with a pencil.) 
McBride: No, I mean sue as 
in take everyone we can 
find to court. 
Boiesy (blushing): Well, 
McBride, I generally don’t 
like to court more than one 
girl at a time, and right now, 
Sue is the only one for me. 
McBride: No, I mean we get a lawyer, 


| as in you, and then you exploit the 
| justice system to reach one of two 


goals: Either we extort as much mon- 


| ey as possible out of the competition, 
| or we generate enough fear that 
| someone purchases our company 

for a huge sum of money just to 
| shut us up. 
| Boiesy: Oh, brilliant, McBride! Eh, no, 
| no — what are we going to claim the 


other companies did wrong? 
McBride: That is precisely the ques- 
tion, Boiesy. (McBride thinks for a 


| moment, then glances down at a copy 
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and 


how 


of Windows XP and breaks into a sly 
grin.) Boiesy, are you pondering what 
I’m pondering? 

Boiesy: Um, I think so, McBride, but 


| isn’t the AMD Duron a durable form 


of nylon? 


| McBride: I don’t know, Boiesy, but I do 


know you are one pin short of a Z80 
processor. Anyway, what does Micro- 
soft do best? 

Boiesy: Create software with security 
vulnerabilities? 

McBride: Besides that, Boiesy. They 
take credit for the work of others. 
They put features from other compa- 
nies’ software into their products, call 


it “Microsoft innovation” and then 


charge people for it. 

Boiesy: I see, McBride! So we're going 
to steal features, put them into SCO 
Unix and charge people more for it! 
Egad, that’s astounding! Er, no, no — 
nobody seems to be interested in buy- 
ing SCO Unix, McBride, so how do we 
charge them anything? 

McBride: That’s where you come in, 
Boiesy. We claim that all the good fea- 
tures of Linux came from SCO Unix, 


| and then we threaten to sue everyone 


for using our intellectual property. 
Boiesy: But it isn’t actually our intel- 
lectual property, is it? 

McBride: By the time anyone finds out, 
it won’t matter, Boiesy. We'll have 
inflated our stock price, damaged 
the competition and gotten more 
press coverage than J. Lo and Ben. 
Come Boiesy, we must prepare for 
tomorrow night. 

Boiesy: Why, McBride? What are we 
going to do tomorrow night? 


| McBride: The same thing we’re going 
| to do every night from now on, Boiesy 
| — try to sue everyone on earth! D 


| WANT OUR OPINION? 


| 
| 





For more columns and links to our archives, go to 
www.computerworld.com/opinions 





\s the world’s leading provider of business application software, we 
have an enormous responsibility to you, our customers. After all, you've 
entrusted your business’s future to our products — and our reputation 
So we'd like to take a few moments to define our commitment to you 


It’s not exactly an oath. But for us, it’s written in stone 


We don’t rush SAP” solutions into the marketplace. They’re engi 


5 


neered for stability and reliability, then tested and retested to ensure it. 


Which makes them the perfect choice for mission-critical business 


processes. Altogether, we spend more than $1 billion a year on research 


and development. Think of it as an investment in your peace of mind 


We're constantly looking for new ways to help you reduce costs and 
limit your financial risk 

Here’s one way: our breakthrough open technology plattorm, SAP 
NetWeaver. It enables you to make use of your existing software invest 
ments, plus choose any software you want in the future — SAP or non 
SAP. The result: significantly lower integration costs, as well as lower total 


cost of ownership 


What does a small pharmaceutical manufacturer have in common 
with a huge financial services company? Frankly, not a lot. Which ts 
why we offer customized solutions for 23 different industries, as well as 
solutions scaled specifically for small and midsize businesses. After all, you 


want solutions that fit, not almost fit 


Even the best software is useless without top-notch support. So we'll 
always stand behind you. In fact, 130,000 consultants will be behind you. 
It’s called the SAP Customer Services Network. 

They can help you strategically plan for, implement, operate, and 
continually improve solutions. Their goal is to maximize your return on 


investment and help you realize your objectives faster than ever. 


We've been in business for over 31 years. Today, 29,000 of our em- 
ployees are servicing 19,600 customers in 120 countries. As you can 
probably deduce from those numbers, we’re committed to being your 
trusted partner for the long term. Evidently, that commitment has not 
gone unnoticed. As BusinessWeek Online recently commented: “In a world 


where being sate is sexy, SAP may be the biggest eye-catcher on the block? 


Lately, there’s been a lot of turmoil in our industry. Hopefully, you 
haven't been affected. 
But if you are, you should know that you have an alternative: a 


company whose main priority is its customers’ needs; a company that 


places the utmost importance on relationships; a company that will be 


here for you. 
If you'd like to talk to that company, call us at 1 800 940 1727 or visit 


sap.com/c ommitment 


THE BEST-RUN BUSINESSES RUN SAP 
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QUOTE OF THE WEEK 

4 [I-communities] provide a rich 
testbed. .. . We’re helping mem- 

bers of the community unleash their own 

creativity around what technology can do. 


- Debra Dunn, senior vice president for 
corporate affairs, Hewlett-Packard Co. 


Q&A 
Add One CIO and Mix Well 


Tyco picks Dana Deasy (left) as the first 
corporatewide CIO on its new executive 


team. His mission: To integrate systems 
at disparate business units. Page 38 


OPINION 
Terminator 4: How to Fire Suppliers 


Careful and regular pruning of your IT ven- 
dors will reduce costs and complexity, says 
columnist Bart Perkins. He provides guide- 
lines for doing it right. Page 41 





Corporate America 
is still in denial about 
the threat of cyber- 
terrorist attacks 
against critical facil- 
ities in the energy, 
telecommunications 
and financial indus- 
tries. By Dan Verton 





secret offensive information warfare tools, which the 
NSA certainly had, could not be used. And while 
they were allowed to penetrate various Pentagon 


| networks, the Red Team was prohibited from break- 
| ing any U.S. laws. The primary target was the U.S. 
| Pacific Command in Hawaii, which is responsible for 


EDITOR’S NOTE: Dan Verton’s book gets 

its title from an emergency planning 

exercise for the 2002 Winter Olympics 

in Utah, code-named Black Ice. In the 
simulation, a major ice storm combines with the dis- 
ruption of utility computer systems to produce regional 
blackouts, Internet outages, cell phone overload and 
telephone failures. It demonstrated the devastating 
effect of physical and electronic attacks on the power 
grid and everything that depends on power, including 
computer systems. An earlier exercise, run by the 
National Security Agency (NSA) and code-named 
Eligible Receiver, was equally chilling: 

Prior to launching their attacks on June 9, 1997, of- 
ficials briefed the team of 35 NSA computer hackers 
on the ground rules. They were told in no uncertain 
terms that they were allowed to use only software 
tools and other hacking utilities that could be down- 
loaded freely from the Internet through any one of 
the hundreds and possibly thousands of hacker Web 
sites. In other words, the Pentagon’s own arsenal of 


all military contingencies and operations conducted 


| in the Pacific theater, including the tension-wracked 
Korean peninsula. 


Posing as hackers hired by the North Korean intel- 


| ligence service, the NSA Red Team dispersed around 
| the country and began digging their way into mili- 


tary networks. They floated through cyberspace with 


| ease, mapping networks and logging passwords 
| gained through brute-force cracking and the more 


subtle tactic of social engineering — sometimes it 
was just easier to call somebody on the telephone, 


| pretend to be a technician or high-ranking official, 
| and ask for his password. The team gained unfettered 
| access to dozens of critical Pentagon computer sys- 


tems. With that level of access, they were free to cre- 


| ate legitimate user accounts for other hackers, delete 
| accounts belonging to authorized officials, reformat 


the server hard drives and scramble the data, or sim- 


| ply shut the systems down. They were able to break 
| through the paltry network defenses with ease, after 


which they could conduct denial-of-service attacks, 


read or make minor changes to sensitive e-mail mes- 
| sages, and disrupt telephone services. And they did 
| so without being traced or identified. 


The results of the exercise stunned all who were 


| involved. The NSA Red Team, using hacking tools 
| that were available to anybody on the Internet, could 


| have crippled the U.S. military’s command and con- 


| trol system for the entire Pacific theater of opera- 
| tions. From a military perspective, that alone was a 


nightmare. But it soon became clear that the exercise 


| had revealed much broader vulnerabilities. 


During the course of analyzing what the Red Team 
had accomplished, NSA officials discovered that 


| much of the private-sector infrastructure in the U.S., 


Black 
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such as the telecommunications and electric power 
grids, could easily be sent into a tailspin using the 
same tools and techniques. More importantly, one 
former high-ranking NSA official indicated that the 
exercise revealed it would be possible to cause 
“strategic damage to the U.S. money supply.” 


Utilities 

During any given year, the average large utility com- 
pany experiences about | million cyber-intrusions 
that require investigation to ensure that critical sys- 
tem components have not been compromised. In 
addition, data collected by Alexandria, Va.-based 
Riptech Inc. on cyber-attacks during the six months 
following the Sept. 11 terrorist attacks showed that 
companies in the energy industry suffer intrusions at 
twice the rate of other industries. And many of those 
attacks appear to be sponsored by governments or 
organizations in the Middle East. Power and energy 
companies averaged 12.5 severe or critical attacks re- 
quiring immediate intervention per company. That 
rate was more than twice the average rate of attacks 
for all 300 companies surveyed. 

The energy industry and many other industrial 
sectors of the economy have opened their enterpris- 
es to a vast array of cyber-disruptions by creating in- 
advertent Internet links (both physical and wireless) | 
between their corporate networks and the digital 
crown jewels of most industrial processes — Super- 
visory Control and Data Acquisition (SCADA) sys- 


Key Themes in 
Black Ice 


= For the first time in our nation’s history, the govern- 
ment alone can’t defend its citizens. With more than 85% 
of the nation’s most critical computer networks and infrastruc- 
ture in the hands of private companies, the front line of the war 
against cyber-terrorism runs through corporate America. 


@ We shouldn't view terrorism solely through an histori- 
cal lens. Terrorists learn from past attacks and will try new 
tactics, such as disrupting computer networks to harm the U.S. 
economy 


= Physical security and IT security are inextricably 
linked. The bombing of a telecom switching center, data 
center or power piant can produce the same denial of service 
that a computer virus or worm does 


8 The 9/11 attack in New York was “the worst cyber- 
terrorist attack in history,” because it disrupted the nation’s 
most critical communications hub. 


® Al-Qaeda, which now uses IT and 
the internet for communications 
and collecting intelligence, is likely 
to evolve to using IT for cyber-terrorism. 
Cyber-terrorism directly supports al- 
Qaeda's strategic objectives 





= Many U.S. Web sites give terror- 
ists detailed information about 
possible targets, including fioor plans, 
backup sites, wired and wireless net- 
works, oil pipelines, ventilation systems 
and more. 
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tems. These are the systems, including real-time pro- 
grammable logic controllers, that manage the actual 
flow of electricity and natural gas and perform other 
critical functions in various industrial control set- 
tings, such as chemical processing plants, water pu- 
rification and delivery systems, wastewater manage- 
ment facilities and a host of manufacturing firms. 
Control, disruption or alteration of critical com- 
mands, instructions and monitoring functions per- 
formed by these systems can be an issue of regional 
and possibly national security [QuickLink 39133]. 
Deregulation and the increased focus on the bot- 
tom line have forced utilities and other companies to 
move more and more operations to the Internet as a 
means of improving efficiency and reducing costs. In 
addition, there has been a simultaneous increase in 
the number of remote dial-in connections estab- 
lished between mobile and home systems belonging 


| to technicians and the actual SCADA systems. 


Telecommunications 

Prolonged power failures have many casualties, the 
first of which is often the telecommunications infra- 
structure, including the Internet. But the telecommu- 
nications industry faces its own security challenges 
that, like those of the energy industry, are the prod- 
uct of market forces. 

The industry has assisted adversaries by making it 
easier for the infrastructure to be targeted and dis- 
rupted. “The vulnerability of the [Internet and com- 
munications] infrastructure to physical attack has in- 
creased as service providers have concentrated their 


| operations in fewer facilities,” stated the report of 


the President’s Commission on Critical Infrastruc- 
ture Protection in 1997. 

This remains a serious problem today, as many 
large data centers have been erected throughout the 


| country that provide single points of failure, particu- 
larly from a physical attack perspective. Should those 


facilities be destroyed or severely damaged, hun- 
dreds and potentially thousands of companies that 


| chose to outsource IT infrastructure or business 


processes could be left without mission-critical data 


| and connectivity. 


At the same time, there’s been an enormous up- 
swing in consolidation throughout the telecommuni- 


| cations industry, the result of deregulation and the 
| unbundling of local networks. This has spawned mil- 


lions of new connection points into the infrastruc- 


ture that adversaries, malicious hackers and terror- 


ists can use to exploit well-known vulnerabilities. 
The susceptibility of telecommunications switch- 


| ing equipment to software-based disruption became 


clear during the 1990 collapse of AT&T’s 
long-distance service. A few lines of incorrect 
code caused a cascading failure of 114 elec- 
tronic switching systems. And while that 
failure was the result of an internal system 
glitch, the Commission on Critical Infra- 
structure Protection concluded that the 
same type of failure “could alternatively 
; have been triggered maliciously by relatively 
gall individual actions.” It went on to state 
at newer generations of switching equip- 
fent are likewise “potentially vulnerable 
0 remote access, alteration, or control by 
skilled attackers.” 
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DEFINITION 


Cyber-Terrorism 


Bice meee ear lie Lae BST url 
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tic political agenda, using computer technology and 
UTM Cai Mckee ye iemelmelcrcle) cee Mir liens (re cee 
ic and physical infrastructures. The goal isto not 
only hurt the economy of a region or country, but 
also to amplify the effects of a traditional physical 
terrorist attack by causing additional confusion and 
panic. It can also take the form of a physical attack - 
without ever touching a computer keyboard - that 
destroys critical Internet, communications-and 


Cire lel met oe 
- Dan Verton 


Financial Services 
Trillions of dollars change hands every day in the 
USS., thanks to electronic transaction and payment 
systems running on computer networks that rely on 
uninterrupted sources of electric power. But deregu- 
lation in both the energy and telecommunications in- 
dustries has helped create multiple points of poten- 
tial failure in the support networks that serve the fi- 
nancial community — support networks that were 
once operated end-to-end by single providers. There- 
fore, regional failures or disruptions of the energy 
and telecommunications systems that power the cy- 
ber-infrastructure of the financial community would 
have an immediate impact on banks, financial ser- 
vices companies, payment systems, investment com- 
panies, and securities and commodities exchanges. 
Unfortunately, conducting strategic attacks has 


| been made easier by the increase in mergers and ac- 


quisitions in the financial sector, which often result in 
centralization of operations centers. And while key or- 
ganizations, such as the New York Stock Exchange, 
have undertaken efforts to increase diversity in sup- 
port infrastructure, the attacks of Sept. ll, 2001, proved 
that massive physical attacks that disable critical pow- 
er and telecommunications infrastructure can stop the 
nation’s financial dealings dead in their tracks. 


Drunk With Denial 


Despite these lessons, many in corporate America re- 
main unconvinced. Two months after the attacks, the 
wounds still wet and raw, a survey of 459 CIOs at ma- 
jor companies found that just 53% of firms had busi- 
ness-continuity plans, and less than half had IT secu- 
rity awareness and training for employees. The pri- 
vate sector remains drunk with denial. 

But if the private sector has been operating under 
the influence, its bartender has been the federal gov- 
ernment and its policy of allowing market forces to 
determine the level of investment in security. Former 
Virginia Gov. James S. Gilmore III (R) says the Bush 
administration’s policy of relying “on private-sector 
willingness to take certain security measures and 
bear the costs” has had little impact to date on the 
state of security readiness in the private sector. D 





Reprinted with permission from Black Ice: The Invisi- 
ble Threat of Cyber-Terrorism, by Dan Verton (Mc- 
Graw-Hill, 2003). Verton isa Computerworld reporter. 
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Customer loyalty software 
helps companies figure out 
how to keep their clients for 
the long term. By Mark Leon 


| ther testing saw that all the buckets lined 





USTOMER SATISFACTION is good, but 
customer loyalty is even better. 
“A satisfied customer is one who sees 

you as meeting expectations,” says John 

Samuels, a senior manager in the mar- 
keting department at CDW Corp., a Vernon Hills, Ill.- 
based direct marketer of more than 50,000 hardware 
and software products, with net sales of $4.3 billion. 
“A loyal customer, on the other hand, wants to do 
business with you again and will recommend you to 
others.” 

CRM packages may help measure satisfaction, but 
not all of them can be used to benchmark loyaity, and 
the link is tenuous. A good loyalty program, accord- 
ing to Bob Chatham, an analyst at Forrester Research 
Inc. in Cambridge, Mass., combines customer feed- 
back and business information with sophisticated 
analytics to produce actionable results. This is why 
IT has to take the lead in loyalty. 

“IT is just about the only department that can co- 
ordinate between business processes, external data- 
analytic vendors and the executives who can trans- 
late output into action,” says Chatham. 

Five years ago, CDW started working with Walker 
Information Inc., a 64-year-old market research firm 





in Indianapolis that focuses on customer loyalty, to 
gather customer experience data. “Initially, these 
were phone surveys” with cycle times of two months 
that were used to generate reports, says Samuels. 

As a beta customer, CDW in April 2002 replaced 


| the phone surveys with Walker’s SmartLoyalty ser- 


vice, which includes an e-mail solicitation that directs 
willing customers to a Web site that Walker co-hosts 


with CDW. It dramatically reduced survey cycle times, 


and some reports are even generated in real time. 

“It’s not that difficult to do Web surveys,” says 
Harry Watkins, a research director at Aberdeen 
Group Inc. in Boston. “Walker’s real value is that 
they have built validated, multivariate 


measures of loyalty into their software. 


As an ASP, Walker also acts as a consul- 
tant, helping companies determine the 


| causal variables that determine loyalty.” 


SmartLoyalty divides customers into 
four “buckets,” or categories, commonly 
used for analyzing customer loyalty. 


| CDW compared a customer's purchasing 


behavior with his bucket and then in fur- 


up very well with customers’ behavior. 
“In other words,” says Samuels, “we 
proved that the software-generated 
model was very predictive.” 

In response, executives sought sales 
improvements. For example, the model 
told them that customers wanted more 


| out of the Web site and from account managers. So 


CDW’s CEO directed the CIO to develop a response 
plan, which led to a new search engine and a Web 
site that delivers more product information. 

“And now our account managers are trained to 
provide more than just ‘speeds and feeds,’ ” says 
Samuels. “For example, they are trained in areas such 
as security and disaster recovery.” These changes are 
paying off, he says, adding, “Each year that we have 
used SmartLoyalty, we have seen the percentage of 
truly loyal customers increase.” 


| Hitting Jackpots 


At Harrah’s Entertainment Inc. in Las Vegas, CIO 
Tim Stanley says focusing on loyalty has helped push 
the casino chain’s numbers in the right direction. In 
1997, Harrah’s launched a loyalty program that pulled 
all customer data into a centralized warehouse and 
provided sophisticated analytics. “We wanted to bet- 
ter understand the value of the investments we make 
in our customers,” says Stanley. 

But this analysis came at a price. “Back then, we 
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used Informix running on NCR for both our opera- 
tional and analytic systems,” he explains. “When we 


| converted to the centralized warehouse, the analytic 


system was a real dog, far too slow.” 
So in 1999, Stanley offloaded the analytics to Tera- 


| data, the NCR Corp. database designed for large data 


sets and parallel architectures. “And the performance 
improvement was stunning,” he says. Harrah’s now 


does near-real-time analysis: As customers interact 
| with slot machines, check into casinos or buy meals, 


they receive reward offers based on the predictive 


| analyses. 


The data revealed other trends as well. For exam- 


| ple, Stanley says Harrah’s previously focused mostly 


on high rollers. But as executives further studied the 


| analyses and reports, they realized that the person 


who visits a casino once or twice a week and spends 
modestly is a great investment. “This was a big ‘Aha!’ 
for us,” Stanley says. The result was a new rewards 
program tailored to low rollers. 


Paying Dividends 


“We have seen consistent growth in revenue and prof- 


| its every quarter since 1999, when we implemented 
| the new loyalty program,” says Stanley. “By cross-cor- 


relating questionnaire analysis with our revenue num- 


| bers, we estimate a steady 60% ROI year after year 


on our investment in customer loyalty.” 
Online gift vendor 1-800-flowers.com 
Inc. chose software from SAS Institute 
Inc. for its customer loyalty system 
because of the price. “Analytical tools 
like SAS Enterprise Miner cost about 
$150,000 — a lot cheaper that the $2 mil- 
lion you might spend on a Siebel cam- 
paign management system,” says Aaron 
Cano, director of customer knowledge 
at 1-800-flowers.com in Westbury, N-Y. 
After only a few months, he has already 
seen more orders in key segments. Cano 
uses the analyses to profile the behavior 
of customers who come back five or six 
times a year and identifies others with 
similar profiles for targeted marketing. 
“In order to do this right, you need to 
use proven methods in statistical, experimental de- 


mit 


| sign,” says Radek Zapert, senior manager for the fi- 


nancial services unit at BearingPoint Inc. in McLean, 
Va. But new tools are making that easier to do. 

“Five years ago, I would have said you needed a 
Ph.D. in statistics to really leverage a tool like SAS 
Enterprise Miner, but that is no longer the case,” says 
Cano. “Now all you need is a good understanding of 
the business and an analytical mind-set.” And tech- 
nology plays a critical role in turning that into action. 

When CDW began using SmartLoyalty, Samuels 
already had a rich source of market research reports. 
“The problem was that all this information was on 


| thousands of sheets of paper, and there was no way 


to get it quickly to the right decision-makers,” he 


| explains. 


That’s where IT closes the loop. Aberdeen’s 
Watkins puts it this way: “With good customer loyal- 
ty technology, IT can wire the voice of the customer 
back into the enterprise.” D 





Leon is a freelance writer in San Francisco. 
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Tyco International Ltd. 

4 has added its first corpo- 
ratewide CIO position to 
bolster the $36 billion 

conglomerate’s brand-new executive 
team. It’s part of a housecleaning fol- 
lowing last year’s fraud and accounting 
scandals under former CEO Dennis 
Kozlowski. To fill the new CIO position, 
Tyco has chosen a man who has had 
success with integrating IT at global 
business segments. DANA S. DEASY previ- 
ously spent nearly four years at Siemens 
AG, where he was CIO of the Americas, 
led about 20 business unit CIOs and had 
an IT budget of $600 million. 

Deasy spoke with Computerworld’s 
Jean Consilvio about how he hopes 
to use his global expertise to help 
Tyco find common ground among its 
five disparate businesses, some of 
which were added during a recent ac- 
quisition binge. 


What are the benefits of being Tyco’s first 
executive-level CIO? One of the advan- 
tages of being the first at anything you 
do is that you have a chance to create 
it, as opposed to inheriting and then 
figuring out how to change it. [Add to] 
that working with an executive team 
that’s basically new, with everybody 
out creating their organization, and 
you definitely have some natural syn- 
ergies and camaraderie that I believe 
will develop a lot quicker. 

And one of the exciting things I see 
in coming to Tyco is that I’m working 
with an executive team that is ex- 
tremely bright, very enthused, thor- 
oughly oriented throughout the mis- 
sion at hand about what has to be done 
in bringing the various Tyco units 
together. 
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What three key points did you learn at 
Siemens, and how can you apply them to 
your new role at Tyco? Clearly the first 
one is to acknowledge and respect that 
the [business unit] CIOs are actually 


| the experts in the business they work 


in and draw upon that expertise. 
No. 2 is, at the end of the day, all the 
COs out there really do want to coop- 


| erate as long as you can acknowledge 


that they have a line of business they 
work for, they have a boss they need to 
work for, and what you need to do is 
find that common ground that they all 
want to work on. And the third one 
would be ... go after the low-hanging 
fruit first. Go after the things that help 


| build the credibility, not only of your 
| own office, but [also] the credibility of 


& It’s not too often 

you get a chance 
to come into a company 
who’s redefining itself 
with a brand-new set of 
corporate officers. It’s just 
an exciting opportunity. 


DANA S. DEASY, SENIOR VICE PRESIDENT 
AND ClO, TYCO INTERNATIONAL LTD 


| 





the community of CIOs you’re working | 


with, and get some early momentum 
going. There will be so much more dif- 
ficult things that have to be accom- 
plished, and you definitely want to get 
some quick wins. 


How will you measure savings in networks, 
data centers and applications? Do you know 
what you're stepping into there? Yeah, I 
think I do, because prior to coming on 
board at Tyco, I was at Siemens, I was 
at General Motors. In both of those en- 
vironments, I was stepping into worlds 
where there was not a lot of good un- 
derstanding of the budget and how 
much was being spent. So I do have an 
appreciation that [on] Day 1, is there 
going to be an understanding of the IT 
landscape and how much we spend? 
No. That is going to have to be ana- 
lyzed, baselined. And then you draw 
upon what I mentioned earlier as your 
quick wins. 


What lies ahead for you in integrating the 
supply chain across business segments? 
Tyco’s involved in a lot of different 
products, services, systems, solutions. 
Each of those have supply chain needs, 
and each of those need to be reviewed 
in terms of how integrated is the sup- 
ply chain within the business segment. 
Do you want to start looking at cross- 
business segment integration? Without 
a doubt. The first opportunity is to 
understand how well Tyco has done 
supply chain integration within the 
businesses. 


What's the biggest challenge in integrating 
data for business users at Tyco? You have 
to find [out] what is it that everybody 
needs and nobody has but everybody 





Add One CIO 
And Mix Well 


_ After the big scandal, Tyco picks an 
experienced CIO to join its new executive team and 
integrate systems of disparate business units. 
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New job: Senior vice 
president and CIO at 
Tyco International Ltd. 
Tyco is incorporated in 
Bermuda, but Deasy is 
located in Princeton, NJ. 


Started: July 28 
Reports to: CEO Ed Breen 


Previous jobs: CIO of the 
Americas at Siemens AG; 
10 for the Locomotive 
Group at General Motors 

Corp. 


wants. And then you have to be realis- 
tic to determine where does that infor- 
mation reside and does it reside today 


| in common systems. Do we have the 


opportunity to create executive infor- 
mation systems, and what will be in- 


| volved in doing that? At most compa- 


nies today in corporate America — this 
is not just a Tyco issue — the CIOs are 
being hard-pressed to get their arms 
around financial controls and the data 
that drives those, and I expect it will 
be no different here at Tyco. 


Do you see IT helping Tyco win back credibil- 
ity among its shareholders? There’s proba- 
bly a lot of areas, everything from be- 
ing able to ensure that we have strong 
financial control to supporting the 
needs of internal control and audit. 
[We've got] to demonstrate that Tyco 
can really bring its various business 
units together and find common ground 
for not only standardization of process- 
es, but good old-fashioned cost savings. 


How do you choose the right technology sup- 
plier? The phone’s already ringing off 
the hook. Every supplier, vendor, all 
the big boys want to get in and talk. 
There is no doubt that there is going to 
be an aggressive push to look at oppor- 
tunities to do better vendor manage 
ment in the IT space. I can tell you 
there’s going to be a good old-fash- 
ioned way you do that: an investigation 
of need within the company, what 

has to be accomplished, who are the 
players that can do that, and then 

let them propose how best they can 
accomplish that. D 
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In the August issue of 

Harvard Business Review, 

DEBRA DUNN and Keith Ya- 

mashita discuss a series of 

initiatives — called i-com- 

munities — in economically 

deprived areas such as the 

town of Kuppam in the state 

of Andhra Pradesh, India. 

Sponsored by Hewlett- 

Packard Co., i-communities 

use public/private partner- 

ships to boost economic 

development through tech- 

nology while building markets, testing 
products and honing the global savvy of 
HP leaders. Dunn, senior vice president 
for corporate affairs at HP, told Kath- 
leen Melymuka how HP has learned to 
do well while doing good. 


What’s an i-community? Essentially, an 
i-community is a collaborative engage- 
ment with government and nonprofit 
or community-based organizations in a 
specific area to figure out how infor- 
mation and communications technolo- 
gy can best accelerate economic devel- 
opment in ways sustainable for the 
community and HP. 


There’s clearly a philanthropic component on 
HP’s part, but you say it’s also tied to busi- 
ness strategy. How? In a couple of criti- 
cal ways. When we think long term 
about where opportunities for growth 
are in our business, accessing develop- 
ing markets is very high on the list of 
opportunities. Today our products are 
probably sold to the top billion people 
in world, but the top [economic] tier is 
getting smaller as a percent of the to- 
tal. So figure out where growth will 





come from. It’s critical to de- 


velop products [for] people 
low on the economic pyra- 
mid. These [i-communities] 
provide a rich testbed: deep 
engagement with real cus- 
tomer needs in a different 
segment of the economic 
strata. And governments in 
emerging markets are apply- 
ing technology as a way te 
deliver services because 
that’s fundamental to their 
success long term. This is 


| getting us closer to that segment. 


Give me an example of how the project has 
affected the community. One of the big 


services we focus on is agriculture. 


[Kuppam] is a pretty remote place and 
not a lot of resources are available to 
help improve productivity. If I’m a 
farmer, I now have access to an agri- 
cultural advisory group via e-mail 





through the community information 


| centers and can use them to diagnose 


all kinds of problems. I can tap into the 
village photographer — another thing 


we've set up — and send in digital pho- | 
| tos of problems with crops and get 
quick turnaround advice. 


What impact do you foresee over the next 
two years of the three-year project? There 
will be more community information 
centers. More citizens will have direct 


| access, target schools will be more 


wired, more teachers will be trained. 


But some of most exciting things will 
| come from the community. That’s the 


power of these projects. They get to 
play with things we take for granted 
and figure out ways to use them that 


| are relevant to them, while tapping the 


technical expertise from HP. 


Can you give me an example? In another 
project in India, an entrepreneur run- 


Kuppam, India: One Year Later 


A year into the HP project, Kuppam’s i-community includes the following: 


& Five community information centers, each with five to 10 computers, staffed by local 
entrepreneurs who offer a suite of Internet-enabled services and help local people access 
them for a small fee. The entrepreneurs tap into government loan programs for initial funding 
and receive technical assistance from HP and other partners. 


™@ Computers and Internet access at targeted local schools. 


@ A government portal, developed largely by HP, that gives residents information and 
access to government services in areas such as health, literacy and agriculture. 


@ A mobile, wireless service center that takes the i-community's technology services 


on the road to those who can’t manage to get into Kuppam. It’s currently operated by HP 
employees but eventually will be taken over by a local entrepreneur. 
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| ning an information center discovered 
| he could use a projector and turn a 

| computer into a cinema. He’s charging 
| a few rupees for a service that’s highly 
| valuable in the community. So we’re 


helping members of the community 
unleash their own creativity around 
what technology can do. 


| Why the three-year deadline? It’s impor- 


tant to create some urgency and incen- 
tive around milestones and around or- 
ganizations getting resources quickly 


| sO you get traction. We have a lot of 


people on the ground there. The goal 
is to get the project to a level where it’s 
sustainable without deep involvement 
by HP. 


| What does HP actually get out of this other 
than potential long-term markets? HP also 


gets some short-term things. Employee 
motivation: Our employees want to be 
part of a company that focuses on 

something bigger than making a profit. 


We get a lot of insight into what it’s go- 


ing to take to compete in this segment 
of the market. We’re very much a part 
of the dialogue in India about trying to 


| provide affordable technology to rural 


communities, and that provides helpful 
intelligence for our mainstream busi- 
ness. And for the people who actually 
work on these projects, the develop- 
ment is unbelievable. This stuff is real- 
ly hard. You learn so much in terms of 


| perspective and being careful about as- 


sumptions and about the dynamics in 
developing markets. It’s phenomenal. 


Many of our readers are technologists in 


| nontechnology companies. Are there oppor- 


tunities for nontechnology companies to get 


| involved in these types of initiatives? 1 think 


there are. This market is very much a 


| services-based, shared-use market. 
| The services that will be delivered will 
| be in the health area, entertainment, 


information — all kinds of things. 
That’s the next ring of the circle: the 
content-based solutions that would 


| feed these types of projects. 


Our goal is to deliver something in 


| the short term, but we want to stimu- 


late the economy, and that fuels the 
broader market for all kinds of organi- 


| zations. There are opportunities for 
| many different kinds of companies to 
be involved. D 


Melymuka is a Computerworld 


| contributing writer. You can contact her 


at kmelymuka@yahoo.com. 





This is the latest in a series of monthly discus- 


| sions with Harvard Business Review authors 


on topics of interest to IT managers. 
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Want the full value of migrating to Linux? 


Dell | Enterprise 


Last year, Dell sold more Linux servers in the U.S. than any other server vendor! And here's 
one reason why. In a recent Dell test, a Dell/Oracle® 9//Linux solution running an Intel® Xeon™ 
processor-based Dell PowerEdge” 6650 4P server was 89% faster and 56% less expensive than a 
Sun Fire V480 4P server running an Oracle 9//Sun Solaris solution? To see complete test results, go 


13.68 sec to www.dell.com/migration17 


There's little, if any, debate: Migrating from UNIX to a standards-based solution lowers cost and 
increases flexibility. Dell gives you both mind-bending performance and unparalleled expertise, all 


Dell / Linux Sun /UNIX Dell / Linux Sun /UNIX at a great value. And the entire solution is backed by enterprise level 24/7 service and support 


Oracle 9/ Oracle 9/ Oracle 9/ Oracle 9/ 


V480 4P Serve The migration is on. Find out how you can make the most of it for your organization. Cal! 
to the Del! UNIX Migration online calculator 
gration!7 to see how a Dell solution can lower 


your migration costs and help simplify the transition 


Leading enterprise solutions. Easy as DLL 
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‘lerminator 4: 
How to Fire Suppliers 


OST ORGANIZATIONS recognize 
the importance of having a rigorous 
supplier selection process and focus 
a lot of attention on supplier acqui- 
sitions. However, many underesti- 


mate the importance of 
having a supplier termi- 
nation process. Since the 
IT supplier portfolio must 
match a dynamic business 
strategy and ever-chang- 
ing IT architecture, an 
untrimmed portfolio will 
continue to expand. It’s 
essential that your suppli- 
er portfolio be reviewed 
and pruned regularly to 
remove suppliers or prod- 
ucts that are no longer 
needed. Careful pruning 
will reduce costs and in- 
frastructure complexity. 
But in most organiza- 
tions, getting rid of an IT 
product, service or vendor is an un- 
usual event, and there’s no clear proc- 
ess to follow. One client with a rigor- 
ous selection process described his 
company’s approach to supplier man- 
agement this way: “We greet our sup- 
pliers at the door with a two-by-four 
to the head. Afterwards, those who 
are still standing are invited in and 
never asked to leave.” He’s not alone. 
My company’s studies show that the 
average supplier portfolio is at least 
50% larger than our clients estimate. 
In other words, most companies 
don’t know just how many vendors 
they really use! An audit of one 
client’s portfolio revealed 3,000 sup- 
pliers, after the client estimated 300. 
When your supplier portfolio 
mushrooms out of control, it often 
indicates that you’ve also lost control 
of your procurement process and 
your architecture. And supplier 





management costs sky- 
rocket. A well-trimmed 
portfolio can be managed 
for less than 5% of total 
external spending, but 
the cost of managing an 
overly large portfolio can 
amount to 20% of total 
external spending. Sup- 
port costs will also be 
higher than necessary. 
Review your supplier 
portfolio, searching for 
suppliers who are under- 
performing or whose 
products no longer meet 
your architectural specifi- 
cations. Target unneces- 
sary products, even if you 
can’t eliminate the supplier entirely. 
Then take steps to terminate them, 
using these guidelines: 

1. Check contracts to make sure 
there are no penalties, givebacks or 
other repercussions for termination. 

2. Create a migration plan. If you 
have a portfolio baseline, it will iden- 
tify all the systems, projects and peo- 


| ple who rely on the product or ser- 


vice being jettisoned. Determine 
how those affected will be support- 
ed, before termination begins. 

3. Use your vendor management 
group to manage the termination 
process. A good vendor management 
group will assure that the process is 
consistent and fair for all parties. 

4. Explain the decision and the ra- 
tionale to the supplier directly. No 
one deserves to learn of his own dis- 
missal around the water cooler or, 
worse, from an industry publication. 





5. Assess the cultural impact. Indi- 
viduals can be fiercely loyal to a par- 
ticular technology that they helped 
create or feel is unique. Provide spe- 
cial hand-holding to ease the pain 
and draw dissenters into the fold. 

6. Make terminations visible. Pub- 
licize the new IT architectural stan- 
dard in the department newsletter, 
on the corporate intranet or through 
other channels. Everyone needs to 
know about the termination before 


| the next architectural decision or the 


next salesperson’s call. 

7. Pay attention to termination de- 
tails. Protect yourself from security 
breaches by remembering to change 
passwords and take access cards 
from vendor personnel. If you’re 
dropping all of a supplier’s products, 
remove the supplier from the ac- 


| counts payable system. 


8. Be creative if obstacles arise. 
One client faced enormous pushback 
from its applications group, which 
had opposed a decision to migrate to 
new hardware. After more than a 
year of requests for cooperation, the 
vice president of operations took a 
new approach: He announced that 
the old hardware had been sold and 
would be loaded onto a truck on a 
specified date. The applications 
group finally rose to the occasion, 
scrambled to convert everything to 
the new hardware and succeeded 
with three days to spare. 

Every superfluous part of your 
supplier portfolio increases costs, 
complicates your procurement proc- 
ess and adds unnecessary complexi- 
ty to your infrastructure. Leverage 
your supplier management efforts by 
reviewing your portfolio regularly 
and terminating any extraneous sup- 
pliers and products. D 





| WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 





Get on the fast track to migration. 


Visit www.dell.com/migration17 and go to the 
Dell UNIX Migration online calculator for a free 
migration assessment. Dell offers a host of 
end-to-end migration services, including those 
for Oracle® 9/. Call 1-866-535-0388 today to 
speak with a Dell representative. Together, you 
can assess your individual needs and then 


develop a cost-effective plan for UNIX migration 


Easy as DG@LL 


Call 1-866-535-0388 
Click www.dell.com/migration17 





ae ~ MARKETPLACE sinc 
A Bird's Eye View in Just 1 U" 


Introducing APC’s Rack-mount LCD Monitor 


As floor space in your IT environment becomes more expensive and difficult to allocate, you need 
to utilize your rack enclosure space as efficiently as possible 


A traditional CRT monitor, monitor shelf, keyboard, and keyboard drawer take up to 13U of your 
valuable rack space. An APC rack-mount LCD monitor/keyboard drawer offers you the same 
functionality while using only 1U (1.75") — leaving you with up to 12U of valuable space 


A full size keyboard with 104 full On-screen display 
travel keys and integrated (OSD) adjustments 
number pad 


An integrated trackball to eliminate the 
need for an external mouse 


1024 x 768 resolution for Active matrix TFT displays that emit 
exceptional image quality for less heat and use less than half the 
most server applications power of comparable CRT monitors ‘ Every product carrying this mark has 
been tested and certified for use with 
InfraStruXure” architecture. Before 
you buy, check for the X to guarantee 
product compatibility. 


Ability to connect to a server or KVM With ever 95 mailliee 
switch via a standard VGA connector onthe deiaiaaiain 1s 
Legendary Reliability~ 
Enter to WIN a FREE APC LCD Monitor today. A $2239 value! guarantees peace of mind. 
Visit http://promo.ape.com Key Code m703y © Call 888-289-APCC x6606 © Fax 401-788-2797 Legendary Reliability® 


ia pport@apcc.com © 132 Fargrounds Roe 


Died he Reach Respected IT Leaders in 


Sends Monitors Embedded Power Internal 
SNMP 64 Web Outage ups 
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Marketplace Advertising Se 


The Computerworld Marketplace advertising sectio rie 
ctneener imtemal Voice, 8 R}AS Sensor Inputs reaches more than 1.8 million IT decision makers ev@ 
era sree Po mrt) week. Marketplace advertising helps Computerwor 
> BE NOTIFIED BEFORE CRITICAL EVENTS TURN INTO DISASTER! readers compare prices, search for the best values, 
sail essen uae nti locate new suppliers and find new products and se 
4 6- ' environmental and network elements in your for their IT needs. 


Microphone 


M 


server room, data center, or telecomm 
installation and reports to you instantly 
when events threaten your infrastructure 
The IMS-4000 keeps watch so you don’t 
have to 

See these features and more on the web 
at— www.sensaphone.com/ims-4000.htmi 


* Eight environment inputs 
* Power sensing 

* Monitors 64 IP addresses 
* Send alerts to 64 people 
* 8 methods of contact 

* Calendar scheduling 

* Expands to 256 sensors 
* Remote power control 


aa : To advertise, call 212-655-5111 


Tel: 610.558.2700 Phonetics, Inc. 


Nea eet Rye es 877-373-2700 ence oy anes eerebel print@ven:com 


www.sensaphone.com Aston, PA 19014 
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IT Careers: BDPA Focuses on Career Growth, Entrepreneurs 


hen more than 2,500 individuals meet for the 

annual Black Data Processing Association 
Conference in Philadelphia Aug. 13-17, they'll get a rich 
blend of three critical career components — technical 
expertise, mentoring and coaching of individuals, and skills 
to lead start-up and established businesses. 

The conference reflects BDPA’s overall mission to open 
the doors of technology for African-Americans, from 
offering programs to expose families to technology to 
offering the latest in IT skills courses. The more than 40 
chapters found throughout the United States offer 
programs ranging from the Homework 911 e-Learning 
hotline to Black Family Technology Awareness Week. 

According to Milt Haynes, BDPA president and a 
feature release development manager at Lucent 
Technologies, that's why the conference agenda is far- 
reaching. Sessions range from the latest in wireless 
technologies and the role of IT in major current events to 
performance comparisons of .NET, XML and Oracle. “Our 
conference theme is Classroom to Boardroom, focusing on 
the fact that education is a life-long effort,” Haynes says. 
“We have to start at the elementary school level to attract, 
mentor, coach and educate individuals for IT careers.” 

In addition to the highly technical sessions, the 
conference is offering workshops on a culture-specific 
approach to e-learning, the challenges for African 
American women in the IT workforce and how faith-based 
programs can assist in bridging the IT divide. Executive 


Pathways includes sessions designed to help 


Software Engineer III: Work with 
engineers and chemists to ana- 
lyze business needs, design 
implement, test, modify and 
release client/server web appli- 
cations to synthesize and opti- 
mize small molecules that have 
the potential to enter clinical 
development and become medi- 
cines. Provide technical support 
for chemists. Design and devel- 
op repository gateway for part- 
ners. Skills include: Java/J2EE 
Python, Oracle, SQL, XML 
HTML, Perl, Shell, JavaScript 
C/C++, Windows, Linux, UNIX 
SGI, chemical informatics toolk- 
its and other development 
tools/platforms. Requirements 
include a Master's degree or 
equivalent in Computer Science. 
an Engineering discipline or 
closely related field. No work 
experience required. Applicants 
must have unrestricted autho- 
rization to work in the United 
States. Salary $66,000/year. 
40 hours/wk. Respond with two 
copies of resume to Case 
#200202756, Labor Exchange 
Office, 19 Staniford St., 1st Fi 

Boston, MA 02114 


BeliSouth, a leader in providing 
local and cellular telephone 
paging and mobile data services 
has multiple openings for the 
position of Systems Admin 
istrator in its Atlanta, Georgia 
Office: Position requires relevant 
bachelor's degree or foreign 
degree equivalent and relevant 
experience 


For consideration, please for- 
ward your resume to: Ms. Lisa 
Burlingame, BellSouth, 2247 
Northlake Parkway, Suite 800 
Tucker, Georgia 30084. Please 
do not email or fax resumes. 
EOE 
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ASSOCIATE IS ANALYST 
Resp. for the dvipmnt & deploy- 
ment of SAP sys. for the co 
Specific duties include: (i) gath- 
ering, dsgng, configuring, script- 
ing, integrating & testing comp 
scripts, interfaces & programs 
for a multi-landscape environ- 
ment; (ii) documenting related 
interfaces; (iii) assisting Staff 
Consultants/SAP Sys. Analysts 
in evaluating user reqmnts for 
new or modified programs; (iv) 
utilizing all components of SAP 
dvipmnt environment to combine 
pre-dvipd software objects 
w/customized programming & to 
generate appins that are highly 
integrated w/the SAP R/3 sys.; & 
(v) providing tech. support to 
users of SAP programs. MS in 
Comp. Sci., Mgmt info. Sys. or 
Bus. Must have working knowl- 
edge of UNIX, Peri, Cold Fusion 
sys. dvipmnt life cycle as well as 
comp. hardware & operating 
sys. High mobility preferred. 40 
hrs/wk, OT as reqd, 8 am - 5 pm 
$64,240/yr. Qualified applicants 
please submit resume to 
Manager, Beaver County Team 
PA Career Link, 2103 Ninth 
Avenue, Beaver Falls, PA 
15010-3957. Please refer to 
Job Order No. WEB 346310 


Computer Support Spec 
Marietta, GA. Provide tech- 
nical support; maintain 
commercial credit card 
information system; coordi- 
nate conversion to new 
hardware and software 
Req'd: BS (or foreign 
equiv.) in Elec. Engin., 
Comp. Science or rel. field 
& 2 yrs exp. in job offered or 
as Programmer/Analyst 
Resumes to: Fast Trip 
Corp., 640 Whitlock Av., 
Marietta, GA 30064. 


professionals navigate their careers. As part of the 
conference, BDPA will also hold its annual career fair, this 
year featuring 30 major employers. Conference attendees 
will be able to take advantage of on-site career coaching 
on everything from resume writing to interviewing skills. 


POOR 


5 


information Technology Thought Leaders 


# 


Haynes is watching over the conference as the 
outgoing president of BDPA. His goals have been simple — 
to build an infrastructure, to capture data on existing IT 
expertise among African Americans to pair up with hiring 
demand, to assist chapters in bringing the Classroom to 
Boardroom program to their communities and in growing 
the BDPA’s entrepreneurial program 

“The biggest obstacle IT professionals face is in 
keeping current with the job market,” Haynes, who also 
served on the Blue Ribbon Diversity Panel for ITAA, says 
“We need to stay one step ahead of the learning.” While 
outsourcing is a constant concern for IT professionals, 
Haynes believes the best and most challenging work is 
remaining in-house where IT professionals can work the 
customer-face aspect much better than any outsource 
provider. “Companies who are looking to the future want 
to keep development inside to maintain a strong 
workforce,” he says. 


For more information about IT Careers advertising, 
please contact: 

Nancy Percival 

Vice President, Recruitment Advertising 

800.762.2977 

500 Old Connecticut Path 

Framingham, MA 01701 

Produced by Carole R. Hedden 


OUR PEOPLE MAKE THE 
DiTTEPENCE waeemar’r coun. 


We're Looking for the Future Leaders of Tomorrow 


Wal-Mart Stores, Inc. has been recognized by 
Fortune Magazine as one of the most admired compa- 
nies in the world. As our company continues to 
expand, so does the opportunity for first-class, talent- 
ed people to guide the future of one of the most suc- 
cessful and 
innovative growth companies in the world. 


Put your career on a fast climb and help us continue to 
set the industry standard in information technology. 


+ UNIX - C, C++, Administration, Engineering, 
Informix DBAs 

* NT Workstation - VB,VC++, Java, ASP, XML 

+ IBM Mainframe - COBOL, CICS, DB2 and 
IMS DBAs 

+ Networking - Ethernet, VSAT, Frame 
Relay, ATM 

* Telecommunications 


WalMart ts An Equal Opportunity Employer. M/F/D/V 
*2000 Wal-Mart Stores, inc. 


Ready to do it all? Candidates interested in joining 
our team should forward a resume to: 


Wal-Mart Information Systems Division 
Attn: Recruiting Department 

805 Moberly Lane M41 

Bentonville, AR 72716-0560 

Fax: (479) 277-4227 

E-mail: ISDADS@wal-mart.com 


For more information, call toll-free: 
1-888-JOBS-ISD or visit our 

Web site at: 
www.walmartstores.com 
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Explore JC 
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here IT's all inside & exciting IT careers await! 


information Technology Opportunities 


are a key ele 
for continued 


‘A Great Place to Work’! 
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JAVA DVLPR 
Anlyze. & dvip. existing or pro- 
posed sftwre. applications. Dvip 
Java-based, srvr. side compo- 
nents to meet client specified 
user reqs. Dvip., implement, & 
improve prgms., applications, & 
related procedures to proces 
data using in-depth knwidge. of 
sftwre. dvipmnt. life cycle 
Encode, test, debug & install 
Operating prgms. & other appli- 
cation sftwre. utilizing knwidge 
of Java  prgmng tools 
Bachelor's (or equiv.). in Comp 
Sci., Math, Engrg., Bus. or 
Commerce plus 2 years experi- 
ence in offered position or as 
Sftwre. Engr., Prgmmr. Analyst 
or Systms. Analyst required 
Exprnce. must include knowl- 
edge of Java, EJB and Swing 
prgmmng. languages; Oracle or 
DB2 = dtbses Websphere 
Weblogic, or Apache applica- 
tions; and operating systms. (at 
least one from List A and one 
from List B): List A includes Sun 
Unix, HP UNIX & AIX. List B 
includes Windows NT or 
Windows 2000. 40 hrs/wk, 8 am 
5 pm. $64,240/yr. Qualified 
applicants report/submit resume 
to Mon Valley Regional 
CareerLink, ATTN: Actg. CL 
Program Supervisor, Donora 
Industrial Park, 570 Galiffa 
Drive, Donora, PA 15033. Refer 
to Job Order 
WEB346288 


Medical Database 
Systems Manager 


Manages, administers, main- 
tains, and configures a Unix 
Linux/Windows/Mac LAN based 
client/server system including 
use of NIS and NFS to perform 
disk and file sharing with Samba 
system Integrates multiple 
online/offline medical and genet- 
ic research databases and 
insures that such databases are 
capable of biology driven data 
mining. Requires a Bachelor's 
degree in Computer Science 
and one year direct experience. 
Send resume, no calis, to 


Medical Coliege of Wisconsin 
Attn: Employment Office- 
JMC0811 
8701 Watertown Plank Rd 
Milwaukee, Wi 53226 
Fax: 414-456-6502 


Consultant, Financial Business 
Systems to analyze complex 
{BM MVS mainframe based 
revolving credit card portfolio 
Vision 21 and Vision Plus soft- 
ware business systems and 
subsystems to direct team mem- 
bers in the design, development 
implementation, and modifica- 
tion of software business sys- 
tems to insure that systems 
enhancements such as late pay- 
ment fee, skip payment, credit 
line underwriting, overlimit fees 
and authorization match-off are 
properly integrated into the 
appropriate Vision based CMS 
posting system. Establishes 
parameters for daily batch 
cycles, supervises team mem- 
bers in coding for Vision Plus 
integration with VSAM data- 
base, and performs systems 
functionality analysis, unit test- 
ing and technical design of sys- 
tem including customization of 
system to meet various end 
users business analysis require- 
ments. Requires Bachelor's 
Degree in Computer Science 
Math, or any Engineering Field 
and three years direct experi- 
ence. Work Location: 636 Grand 
Regency Blvd, Brandon, Florida 
Send resumes only, no calls, to: 
Kathi Nogle, Household, 2700 
Sanders Rd., Prospect Heights 
IL 60070 


BeliSouth, a leader in providing 
local and cellular telephone 
paging and mobile data services 
has multiple openings for the fol- 
lowing positions in its Atlanta 
Georgia office 


Senior Software Developer 
Software Engineer 
Channel! Analyst 


All positions require a relevant 
bachelor’s or master's degree or 
foreign degree equivalent and 
relevant experience including 
experience with Homebase soft- 
ware 


For consideration, please for- 
ward your resume to: Ms. Lisa 
Burlingame, BellSouth, 2247 
Northlake Parkway, Suite 800. 
Tucker, Georgia 30084. Please 
do not email or fax resumes 


EOE 
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Principal Software Cons- 
ultant/Developer to provide 
strategic & tactical definition 
and direction to Co's Fund 
Analysis & Research Group 
Will support recurring & ad 
hoc requests for data and 
analysis; will manage devel- 
opment stage of project lifecy: 
cles to include creating writ- 
ten system requirements 
applications development, 
coordinating QA testing & 
implementing resulting sys- 
tems solutions in a highly 
matrixed work environment 
Will enhance unit's Sybase 
database tables & Perl load- 
ers to support loading & dis- 
seminating data using 
Morgan Stanley Capital 
international/Standard&Poor, 
(MSCI/SP) sector schemes 
perform analysis, design & 
implement the data model for 
Marketing Event Planner: cre- 
ate & modify Sybase stored 
procedures; migrate Sybase 
SP and Perl loaders into new 
Sybase environment; and 
also redesign and improve 
data warehouse ETL 
(Extraction & Transformation 
Layer) process written in 
PERL and run over UNIX 
Solaris Platform. Requires 
Bach or equivalent in 
Computer Science, Engin- 
eering, Math, or Physics and 
5 years in job offered OR 5 
yrs exper in client/server 
development, OR Master's or 
equiv in C.Sc., Eng, Math, or} 
Physics and 3 years in job 
offered OR 3 yrs in client/ 
server development. Candi- 
date must also possess 
demonstrated expertise in 
Sybase and Oracle database 
design & administration; 
demonstrated expertise 
developing application in Perl 
Unix shell script, SQL and 
C++; and demonstrated 
expertise in data modeling 
and data warehousing mod- 
eling. Salary $77,000/yr, M-F 
9AM-5PM. Send 2 resumes to 
Case # 200202126, Labor} 
Exchange Office, 19 Staniford 
St., 1st fl., Boston, MA 02114 
EOE Applicants must be 
U.S. workers eligible to 
accept full-time employment 
inUS 


PROGRAMMER/ANALYST 
sought by NJ _ based 
Securities Dealer. Must pos- 
sess Bachelor's or equivalent 
in Electronics Engineering or 
directly related field and 2 
years exp. in software devel- 
opment/design and analysis 
implementation and testing 
using J2EE, ASP, PL/SQL 
RDBMS Oracie, UNIX 
Windows. Respond to 
Human Resources Depar- 
tment #GLM-806RJ: Knight 
Trading Group, Inc., 525 
Washington Blvd., Jersey 
City, NJ 07310 


Programmer Develop/write 
computer programs & maintain 
company Artificial Intelligence 
systems using SiCStus PRO- 
LOG, C++, Java, JavaScript 
Win2000, Unix, etc. Also assist 
in the development & mainte- 
nance of company’s proprietary 
middie tier software program 
Req. BS in Com. Sc. or closely 
related field + 2 yr exp. in job 
offer or Software Engineering 
Resume to Personnel Mgr 
WebTone Technologies, 3535 
Piedmont Rd, Ste 800, Atlanta 
GA 30305 
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LUCKILY, WE ARE TOO! 
itcareers.com is now powered 


by CareerJournal.com! 


Search for jobs and post 
your resume here on 


www.itcareers.com 
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BDPA, The Premier Organization For African Americans 
in Information Technology, Invites You To Attend The... 


CAREER EXPO 


August 15 - 16, 2003 ¢ Philadelphia Marriott 
Friday, August 15: 10:00am - 6:00pm ¢ Saturday, August 16: 10:00am - 4:00pm 
FREE ADMISSION TO THE CAREER EXPO! 
Employers Include: Abbott Laboratories ¢ Accenture * Advanced Reasoning Systems ¢ 
Cross Blue Shield ¢ AstraZeneca # Cardinal Health « Computer Associates ¢ Compuware Corpora! 


Dell Computer * Deloitte Consulting ¢ FleetBoston Financial ¢ GlaxoSmithKline ¢ Greenwich 
Partners * Hewitt Associates ¢ Household International * lowa Human Resource Recruitmen' 
Consortium ¢ Mayo Clinic © McDonalds Corporation * Merck & Company ¢ Performigenc 
Corporation ¢ Sears Roebuck & Co. © Siebel Systems @ Siemens Business Services ¢ Thomson 
West Toyota Motors @ Unisys ¢ The Vanguard Group * Verizon Wireless * Wachovia 


For the latest information, please visit us at www.shomex.com/bdpa 
Employers - To exhibit at the Career Expo, please call Gloriann Clark at 310-309-4409 


To register or get more information on attending the 


conference, which features over 


J) workshops, please call 


800-727-BDPA or visit us at www.bdpa.org/conference.cfm 


Sr. SW Engr.- Develop, inte- 
grate, maintain & test complex 
communication protocols includ- 
ing, but not limited to: Sigtran 
SS7/CCS7 & ISDN. Participate 
in design & code reviews of new 
SW & modifica’ns to exist'g SW. 
Develop, maintain & test tele- 
com applications & system SW 
responsible for configuring & 
controlling the system, internal 
communication between SW 
entities, fault tolerant & redun- 
dant operation of SW. Analyze 
& document computerized tele- 
com system SW regqs., function- 
al specs., architectural specs. & 
design specs. Must have M.S. in 
Comp. Eng’g, Comp. Sci., E.E 
or equiv., + 2 yrs. exp. in job 
offered or 2 yrs. exp. w/telecom 
SW development. (Exp. may be 
gained before or after M.S.). In 
the alternative, employer will 
accept Bachelors degree + 5 
yrs. of progressively responsible 
post-grad SW _ development 
exp., including 2 yrs. telecom 
SW developmt. exp. Must have 
proficiency in C programming, 
as well as knowledge of telecom 
protocols. 40 hrs/wk; Salary 
$92,833/yr. Send 2 copies of 
resume to: Case #200201646. 
2002 Labor Exchange Office, 19 
Staniford St 1st Fl, Boston MA 
02114 


Programmer/Analyst, Must 
have Bachelor's in Computer 
Science or its functional 
equiv., and 2yrs exp. Oversee 
company technology system 
analyze user needs, system 
capabilities. Install, upgrade 
software. Develop programs 
to improve production or 
workflow as req'd. 40 hrs/wk 
9AM-5PM Competitive 
salary. Send resume to: USA 
Grocers Management, 7284 
W. Palmetto Park Rd., Ste 
101 South, Boca Raton, FL 
33433 
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Ketchikan Public Utilities 
Telephone Division is a rural, 
wireline telephone 

company (LEC) 

servicing over 8,000 
customers with 

2,000 lines 


City of 
Ketchikan 


KPU is currently looking for a person with knowledge of voice, data 
and optical communication internetwor' nowledge of AFC 
DSLAM & Telliant products would be a plus. Intimate knowledge of 
Switched Ethernet, IP Television, Routing Protocols, TCP/IP, and 
MPLS, is highly desirable. Exposure to DMS100 and wireless tech- 
nology would be helpful. Candidate should be proficient in 
advanced diagnostic tools including NUS management tools 

able to work weil in a team environment and provide leadership to work 
tasks. Minimum of 4-years work experience in IP IT is required, formal 
education preferred. This is a full time position contingent on six (6) 
month probation, $33.17/hr. plus benefits. 


This position is open until filled. Complete job description and 
application available on the City's Website at 
www.city.ketchikan.ak.us or the City of Ketchikan 334 Front 
Street, Ketchikan, AK 99901, E-mail caroih@city.ketchikan.ak.us 
or Phone (907) 228-5631. EOE/AA. 


www.city.ketchikan.ak.us 


Computer Programmer, de- 
velop & write business apps location: Matthews, NC 
computer progs. using Java, Design, develop & imple- 
JSP, JDBC & SQL for docu- ment software solutions 
Analyze requirements for 
reservations sys., account- 
ing, credit cards, payroll & 
personnel. Test procedures 
& perform network adm 
trical Engineer. 40 hrs/wk Req.: Bachelor's deg. (or 
Job/interview site: San Bern- equiv.) in Comp Info. Sys 
ardino, CA. Send resume to (or other IT field or related) 
Econo Lube N Tune, 1685 W Resume to NDASR 


Kendall Dr, San Bernardino, Investments, 1600 S. Hwy. 
CA 92407 81/287, Decatur, TX 76234 


Network Engineer: (2) Job 


menting, data entry, retrieval 
& testing prog websites. Req 
B.S. in Computer Science 
Computer Engineer or Elec- 
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Share our vision 
and you'll see what's possible. 


MasterCard. Focused on Diversity. 


At MasterCard International, we believe the surest way to 
attract and retain the best talent is 

by embracing a broad spectrum of 

ideas and opinions. It’s this 

commitment to a diverse culture 

that has helped make us a leader 

in the global payments industry. 


To learn more about opportunities 
at MasterCard, visit us at www.mastercardintl.com 


Programmer/System Analysts 
S/W Engineers wanted by 
Innovative Consulting. Cand- 
idates must have degree. Skilis 
in Oracie, Java, SAP, SQL, VB 
WebLogic/WebSphere & Unix 
will have preference. Travel 
required for some positions 
Please send resumes to 
info@icscorpusa.com 


Medical Data Processing is look- 
ing for system analyst, database 
administrator. Duties inciude 
design & implement web based 
medical billing software & sys- 
tems. Qualified candidates must 
have minimum BS with experi- 
ence using Java, Java Swing 

at leona mdp.com 


Software Eng'r 
Q-Lytics Consulting inc. seeks 
Software Dev't Eng’ in 
Wescosville, PA. Assist to devel- 
Op applications incl. Oracle + 
Web applics (standalone + n- 
tier). Analyze software req’'s 
work w/ eng. team; dev testing 
Programming + docs; upgrades 
+ maint; also db design + mod- 
eling Use technologies inci 
UML, IBM WebSphere, Web- 
Logic, Java, J2EE, XML, ERP. 
Oracie, DB2, CRM, Jbuilder, 
Visual Age for Java, Toad 
DBArtisann + Vantive Must 
have Masters in Computer Sci. + 
6 mos relevant exp. Resume to 
Q-Lytics, H.R., 1011 Brookside 
Road, Ste. 140, Wescosvilie PA. 
18106. 


MasterCard 
International 


Prog/Analysts to analyze ec ds needed 
design and develop s/w appis didates possess- 
using Java SORBA, XML a Ss 2quiv. and rel. work 
XSLT, HTML, Jscript, JDBC = a Z 
etc. under Windows: x OS 

perform Enterprise Application 

Integration 

BusinessWare; perform 


f the req. rel. work 


ide 2 years 


Offsite maintena 
ion 
code optir 
or foreign ec r 99 
or foreign equiv : echnologies 
(any branch) & 2 yrs o f 
< re 
IT. F/T. Hig salary, trave' 
involved. Resume to HR 
Ordusion Technologies, Inc 
3883 Rogers Road Metals Bank Bu 
7 12, Butte, MT 59 


Suite 504 uth, G. 0097 e 612, Bi 


ai requirements 4 n Serviets 
based on acc lS, Oracle, M 
. Windows 
n aut 
ss 


systems/applications development 

Experience with J2EE development 

S UML modeling; UNIX Script 

ng; and SQL Scripting also 
quired. “Master's degree in appr: 
priate field will offset 2 years of 

general experience. Submit res- i T igh salary 
umes to Sibi Geo Resume 
Corporate Services, Semafor Techn: 
Tower Bivd., Suite 141 Holcomb Bridg 
FL 32810. EOE M/F/D/V. 212, Norcross, GA 30092 
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Senior Software Developer to 
participate as high level techni- 
cal expert in the design, deve 
opment, coding 1g, and 
debugging of financial distrib 
uted dlications nc 

Centralized Transaction Module 


essing 


-based 
evelopment 


and dev 


cations ser 


Science, Engineering 
y-related field and three 
years experience in job offered 
yr three (3) years experience as 
are/Systems Engineer OR 
Degree and five (5 
experience 
also possess 
pertise design 
eloping enterprise. 
cations ser using 
application server 
solutions and 
database systems 
‘ated expertise design: 
ing and developing applications 
using Rational Unified Process 
and WebGain Stud 
demonstrated expertis 
IBM MQ based applica 
S involving exchange of data 
ween Legacy and UNIX sys- 
tems; and, demonstrated exper- 
tise developing applications for 
real-time systems using Java 
Serviets, Shell Scripts, XML 
XSLT, HTML, and PL/SQL. 40+ 
hours/week, 9:00AM to 5:00PM 
$86,300/year. Submit two (2) 
copies of resume to Case 
#200202570, Labor Exchange 
Office, 19 Staniford Street, 1st 
floor, Boston, MA 02114. Must 
have proof of legal authority to 
work permanently in the U.S 


Programmer, Engg & Sc., 8a-5p. 
40 hrs/wk. Formulate tech'l 
specs for mechanical & industri- 
al processes/procedures auto. 
mation & applics; prep detailed 
workflow chart for inp: output 
& logical operations; test systm 
prep tech'l documentation; prgm 
websites using client-server 
technology, e-commerce appli 
cation dvipmt, Java, EJB, JSP & 
XML. Bach or equiv deg w/major 
in Info Systms, Com; 

Engg, Electronics, Electrical 
Mechanical, Industrial or related 
Sci/Engg. 1 yr exp in job or as 
comp prof! w/above skills 
Resume to: GTS, Inc. 3761 
Venture Dr., Bldg. 100, Suite 
#240, Duluth, GA 30096 


Telephony Solutions Developer 
BS + 2 yrs exp to inci Dialogic 
GLobalCall, ATL, Visual C++ 
Visual Studio.NET, SQL Server 
COM/DCOM Brooktrout 
ReaiCT SDK & call processing 
on digital & analog circuits req 
Systems Analyst: BS + 2 yrs exp 
to incl Visual Studio, SQL 
Server, Visual C++, ATL. Exp 
reqd in documenting scope & 
dsgn, dvipmt & deployment of 
NET solutions req. Both pos req 
MCSD & demonstrated busi- 
ness communication skills as 
well as verifiable refs for above 
reqmts. Apply to jobs2003@a-t 
g.com, Des Moines, IA 
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Senior Software Engineer 
Design, develop, & implement 
off-the-shelf software solutions 
providing web-based billing & 
presentment, & account man 
agement using Java in a UNIX 
Solaris, & NT shrink-wrapped 
development environment 
Analyze & design software app 
cations in n-tiered, web-based 
nment using OOA/OOD 
ciples & UML modeling 
tools. Debug & solve complex 
problems in distributed environ- 
ments using VisiBroker, C++ 
Netscape, Oracle, VisualCafe. 
VJ++, & Integrated Develop 
ment Environment tools frorm 
Microsoft. Design 
slational datat 
of stored procedures & 
maintain data integr 
Oracle & MS-SQL 
mplement GUI tools, elements 
user interface & business 
logic using Java/XML, V 
Basic, C/C++ programming & 
Internet communications/securi- 
ty skills. Design, develop, & 
mplement n-tier architecture 
solutions for internet based 
applications Jows 
for IS, ASP, SQL 
native Windows technologies 
Bachelors degree (or foreign 
equiv.) in Comp. S 
Eng'g/Elect. Eng’g or close 
related field, & 5 yrs of progres- 
Ss! esponsible experience in 
job offered or as Software 
Developer/Eng'g In lieu, will 
accept Master's degree (or for- 
Nn equiv.) in Comp. Sci 
Comp. Eng'g/Elect. Eng’g, or 
closely related field, plus 3 yrs of 
experience. Requires demon- 
strated expertise in completion 
| development cycles in 
ncluding 
analyzing & designing software 
applications using OOA/OOD 
principles & UML modeling 
tools, & demonstrated expertise 
in analyzing various legacy print 
stream data file formats, includ- 
ing Advanced Function 
Presentation, MetaCode, DJDE 
& PDF, as well as architecting 
solutions for extracting & manip- 
ulating data. 40+ hrs/wk; 8a-5p 
(M-F); $90,500.00/yr. Submit 
resume in duplicate to: Case 
#200202545, Labor Exchange 
Office, 19 Staniford St, 1st fil 
Boston, MA 02114. EOE 


Windows environ 


SOFTWARE, Sr. 
Systems Analyst. 
Complete Business 
Services in SF, C++, 
Java, ASP, Silktest (or 
equiv). Test/develop 
software systems and 
products. MSCS/IS. 1 
yr exp. Salary 
$80,890. Fax resume 
(415) 584-5226. 


Programmer Analyst 
needed w/exp in using 
Sybase, MS SQL 
Server, Erwin, CAST, 
Rational Rose, VB, MS 
Access, JAD, RAD, Sun 
Solaris & Windows 
2000. Send resumes to: 
Triple Point Tech., Inc., 
301 Riverside Ave., 
Westport, CT 06880. No 
in Person Resumes. 
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TechNation Software Consulting 
Inc, a software consulting company 
with its main place of business at 
Sioux Falls, SD has ple posi 
tions for Software Professionals. 

Sr. Software Engineers: BS in CS 


alent with more than 5 years 


design 


oth fr 


applicatior 


1ce in Manage 
f Enterprise Network Storage 
SAN or NAS), HP 
ritas NetBackt 
TechNation provides 
ing services to clients 
United States and hence 
requirement for al! positior 
must be willin 
s the country for per 
3-6 months or as 
Send resumes to Rona Troff 
Dakota Ave te #505-B 


IT Consultant: Roundarch, Inc 
seeks an individual for its Chicago 
Office to develop & deploy complex 
web content management systems 
(CMS) & portal systems for consult. 
ing clients using web-based devel. 
opment techniques & JAVA, HTML 
DHTML & XML languages. Suc 
cessful candidates will have a rele 
vant Bachelor's degree in CS, EE 
or related and at least 4 yrs. exp. in 
software development consulting 
at least 3 yrs of which is in web 
based development of content 
management systems using HTML 
& XML. Resume to: Rounc 

Inc., c/o Deloitte Consultin 
Cathe Slocum, 2 Tower Center 
Bivd, East Brunswick, NJ 08816 or 
fax 73 


Computer Support Specialist - 
Assist & maintain networked 
comp system manag'g 
d/base, dvipg customized 
reports thru integrated info 
system Dvip bilingual 
(Eng/Span) website & tech 
SQL, applics & VB doc. Write 
interfaces & modify system to 
S. Amer format to meet needs 
of Latin Amer mkt. Train 
users. 35 hrs. 2 yrs coll Syst 
Engg or Info Syst (or for 
equiv) + 2 yrs exp. Fax 
resume & salary reqmts to Mr. 
Perez, (305) 275-4559 


new 


econonyy. 
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itcareers.com 


is the place where 
your fellow readers 
are getting a jump 
on even more of the 
world's best jobs. 


Now combined with 
Careerjournal.com, 
You have more jobs 
to choose from. 


Stop in for a visit. 


See for yourself. 


Www.itcareers.com 
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Software Engineer to design 
engineer, install and support 
computer systems to run JD 
Edwards One World and/or 
World on Windows and/or 
midrange environments 
Create and configure non-stan- 
dard OneWorld environment 
based on client's requirements 
by creating new environment. 
path code, database and their 
configuration Bachelors 
Degree in Engineering or 
Computer Science and five 
years experience or Masters 
Degree and Two years experi- 
ence 

Systems Engineer to install and 
configure OneWorld ERP 
System Install OneWorld 
Deployment and OneWorld 
Enterprise Server on Windows 
plaiform. Setup and Manager 
CNC activities of OneWorid ERP 
Systems. Install and provide 
assistance with Citrix Software. 
Perform Backup of the System 
(OneWorld & SQL Server) 
Create and configure non-stan- 
dard OneWorld configuration 
Bachelors Degree in Computer 
Engineering and Two Years 
Experience. Send resume to 
Belisoft Inc. 8770 W. Bryn Mawr 
Ave., Suite 1300, Chicago, IL 
60631 


Systems Analyst. Job location: 
Boulder, CO. Duties: Use IBM 
mainframe comp. SP2/RS6000 in 
an AIX environ. to analyze & 
design techniques to spt. system 
develop. & integration testing 
Develop tools & techniques for 
automation. Perform system 
admin., security, infrastructure 
design & build relating to Linux on 
Intel arch. Troubleshoot tech 
defects in oper. system & hard- 
ware arch. Provide problem reso- 
lution. Mentor & train jr. systems 
administrators. Requires: B.S. (or 
foreign equiv.) in Comp. Sci 
Eng. or a related field & 2 yrs. 
exp. in the job offered or 2 yrs. 
exp. as a Prog/Analyst, Consult 
or IT Specialist. Concurrent exp. 
must incl. 2 yrs. exp. using IBM 
mainframe computers SP2/RS 
6000 in an AIX environ. & 2 yrs. 
exp. troubleshooting tech. defects 
in oper. system & hardware arch 
Send resume (no calls) to 
Donald Crockett, CTG, Inc., 4699 
Nautilus Court South, Ste. 101 
Boulder, CO 80301-5306 


SOFTWARE ENGINEER 
Software engineer to design 
develop and test computer pro: 
grams for business applications 
analyze software requirements 
to determine feasibility of 
design; direct software system 
testing procedures using exper- 
tise in IIS 5, VB, WINS, DHCP, 
NetIQ and NNM. Requirements. 
Bachelor's Degree or equivalent 
in Computer Science or related 
field and two years experience 
as a software engineer or com- 
puter programmer, knowledge of 
iS 5, VB, WINS, DHCP, NetiQ 
and NNM._ Salary: $80,000; 
year. Working Condtions: 8:00 
A.M to 5:00 PM 40 
hours/week, involves extensive 
travel and frequent relocation 
Apply: Site Manager, Armstrong 
County CareerLink, 1270 North 
Water Street, PO Box 759. 
Kittanning, PA 16201, Job No. 
WEB347292 


alee Basten ererey eal 


SENIOR SOFTWARE ENGI- 
NEER to design, develop, con- 
figure and debug real-time 
embedcsc software for 
GSM/GPRS cellular communi- 
cation systems using SDL, C 
C++ and Assembly language 
as well as software configuration 
management tools including 
Clear case and Clear quest 
Responsible for unit and integra- 
tion testing of Layer 2 and Layer 
3 of GSM/GPRS protocol stack 
software; Develop test scripts 
on Anite and R&S Protocol test 
systems for GSM/GPRS mobile 
station conformance specifica- 
tion. Require: B.S. degree in 
Computer Science, an Engin- 
eering discipline, or a closely 
related field with 5 yrs of pro- 
gressively responsible exp in 
the job offered or as a 
Programmer/Analyst or Progr- 
ammer. Competitive salary 
offered. Apply by resume to 
Nancy Geraghty, Panasonic 
Mobile Communications 
Development Corp. of USA 
1225 North Brook Pkwy 
Suwanee, GA 30024; Attn: Job 
SP. 


Network Systems Data Comm 
Analyst Job location: New Castle. 
DE. Duties: Provide tech/infra 
structure support & implem. ser- 
vices to Latin Amer. user base. 
Perform UNIX system admin. HP- 
TRU64-SUN & provide opers. 
support for Basic Cosmos appls. 
Perform proj. mgmt. on end-to- 
end tech. implem. on appls. 
CACLSweb, Exceller, Flexcube & 
E-credit appls. for Latin Amer. 
countries. Resp. for implem. of 
Oracle, migration of VAX appis. to 
UNIX, & install., design & rollout of 
NDM, MQ Series & OPC 
Requires: B.S. (or foreign equiv.) 
in Comp. Sci., Eng. or a related 
field & 2 yrs. exp. in the job offered 
or 2 yrs. exp. as a Consultant or 
Speciaiist. Concurrent exp. must 
incl. 2 yrs. exp. providing tech 
infrastructure spt. for Latin Amer 
countries & 2 yrs. exp. performing 
UNIX system admin. Send 
resume (no calls) to: Molly Stone 
CTG, inc., 800 Delaware Ave 
Buffalo. NY 14209-2094 


SOFTWARE ENGINEER 
Software engineer to design 
develop and test computer pro- 
grams for business applications 
analyze software requirements to 
determine feasibility of design 
direct software system testing pro- 
cedures using expertise in Oracle 
Financials 11i, TOAD, Discoverer 
3i, Taviz Integration Studio & 
Biztalk. Requirements: Bachelor's 
Degree or equivalent in Computer 
Science or related field and two 
years experience as a software 
engineer or computer program. 
mer, knowledge of Oracle 
Financials 111, TOAD, Discoverer 
3i, Taviz Integration Studio & 
Biztalk Salary: $85,000/year. 
Working Conditions: 8:00 A.M. to 
5:00 PM 40 hours/week 
involves extensive travel and fre- 
quent relocation. Apply: Fayette 
County CareerLink Attn 
CareerLink Program Supervisor, 
32 lowa Street, Uniontown, PA 
15401, Job No. WEB347305. 


Local Computer Consulting 
Company looking for the follow- 
ing 

Computer Programmer/tester 
Person will be involved in creat- 
ing test and production databas- 
es and tablespaces on different 
containers and raw devices 
The bufferpool sizes are esti- 
mated , the database functions 
are done using software known 
as db2artisan extracting sql 
scripts, Migration, loading, reor- 
ganizing, etc. Tuning Para- 
meters using benchmark testing 
methods using the DB2BATCH 
Utility The different backup 
strategies like export, import 
environment:UDB7.1, AIX 4.3 
DB2, Oracle 4, Win-NT. 
Rate of Pay 61 00/per 
year, Hrs:40/wk (8am-5Spm) 
Must have bachelor’s degree in 
computer science (or equiva- 
lence) + 2years as a computer 
programmer or an information 
technology programmer. Must 
be willing to accept long term 
assignments at client 's premis- 
es. Mail resume to: Case # 
200112945 Labor Exchange 
Office 19 Staniford St. 1st fi 
Boston, MA 02214.a 


Computer/Info Systems 


Lowe's Companies, Inc., a lead- 
ing provider in home improve- 
ment products, is currently seek- 
ing applicants in Wilkesboro, NC 
for various levels of Database 
Administrators, Data Systems 
Analysts MIS 
Programmers and Trainees) and 
Programmers. Depending upon 
the position, applicants must 
possess a BS or MS and/or 
equivalent combination of edu 


Analysts 


cation and/or experience and 


related skills 


Resumes should be submitted 
with a cover letter referencing 
specific job title of interest to: P. 
Norwood Corp Recruiter. 
Lowe's Companies, Inc., 1605 
Curtis Bridge Rd., Wilkesboro 
NC 28697. APPL 
SUBMITTED WITHOUT 
ERENCE TO JOB TITLE WILL 
NOT BE ACCEPTED. EOE 
M/F/D/V 


SOFTWARE ENGINEER 
responsible for all four phases of 
SDLC; Design, develop test 
and implement appiication soft 
ware in a client/server environ- 
ment using J2EE, WebSphere 
Application Server, UML (OOAD 
Model), Rational Rose, Java 
Serviets, WSAD, Jakarta Struts 
EJB, XML, JSP, JDBC, Java- 
SQL and Java Beans; Develop 
Triggers and Stored Procedures 
using DB2, Oracle and Java 
Require Master's degree in 
Computer Science/Engineering 
or a closely related field with 2 
yrs of exp in the job offered or as 
a Programmer/Analyst. Compe- 
titive salary offered. Apply by 
resume to: Dave Bloomaquist. 
Global Software Development 
Services, Inc.,10 South 5th St 
Ste. 700, Minneapolis 
55402; Attn: Job PC 


rere The Best Get Better! 
wWwww.itcareers.com 
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Computer Programmer - Convert 
project specifications and state- 
ments of problems and proce- 
dures to detailed logical flow 
charts for coding into computer 
language. Develop and write 
computer programs to store 
locate, and retrieve specific doc- 
uments, data and information. 
Program websites. Work under 
direction of supervisor, Work 
internally at company. Must have 
Bachelors of Science Degree in 
Computer Science or Math and 1 
yr. Of computer professional-re- 
lated exp. Must have 1 yr. Exp. in 
converting project specifications 
and statements of problems and 
procedures detailed logica 
flow charts for coding into com- 
puter language; developing and 
writing computer programs te 
Store, locate, and retrieve specif- 
ic documents, data and informa 
tion; and programming websites 
Must have 1 yr. Exp. with Java 
Java Serviets, HTML or UNIX. 40 
Hrs./wk., $34956.00/yr. Submit 
resume referencing job order 
#1101778 to lowa Workforce 
Center, 800 7th St. SE, Cedar 
Rapids. lowa §2406-0729 
Employer paid advertisement 


Jaypar, Inc. 
Seeking IT Professionals 


Programmers/Analysts 
Software Engine 


Experience and skills in most of 
the following areas are required. 


Java, J2EE, EJB, .NET, ASP, 
VB, VC++, XML, BroadVision 
WebLogic, Sun Enterprise/Ultra 
Sparc PL/SQL Oracle 
Peoplesoft and SAP 
Applications 


B.S.. MS. or MCA or higher 
education with good under 
standing of programming, web 
technologies and databases are 
essential. At least three years of 
prior industry experience is a 
must. Excellent communication 
and presentation skills a must 
Applicant must be open to fre- 
quent travel and relocation 
Send resumes to Attn: Human 
Resources at 3730 Garand 
Road, Ellicott City, MD 21042 
NO PHONE CALLS PLEASE 


SENIOR SOFTWARE ENGI- 
NEER to design, develop, test 
implement, maintain and sup- 
port web-based and client/serv- 
er application software in a 
multi-tier environment using C 
C++, Visual Basic, ASP. 
COM/DCOM, .NET, Java, SAP 
(ERP), Oracle, MS SQL and 
DB2 under Windows 95/98, 
NT/2000, UNIX and MS DOS 
operating systems. Require 
B.S degree n Computer 
Science, an Engineering disci- 
pline, or a closely related field 
with 5 yrs of progressively 
responsible exp in the job 
offered. Extensive travel on 
assignment to various client 
sites within the U.S. is required 
Competitive salary offered 
Apply by resume to: Ravi 
Kandimalla, Everest Computers 
Inc., 900 Old Roswell Lakes 
Pkwy, Ste 300, Roswell, GA 
30076; Attn: Job EA 


Software Engineer 


Design, Test, Document 
and Update Software ap- 
plications. Prefer a Bach- 
elor’s Degree or Foreign 
equivalent in a Business 
Or computer related field 
Send resumes to 


Epoch Solutions inc. 
One Northfield Plaza, 
Suite 300 
Northfield, IL 60093 
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Senior Software Engineer: Re- 
sponsible for designing & imple- 
menting extensions & functional- 
ities to BGP, OSPF, ISIS, and 
BGP-MPLS VPNs routing p 

cols. Will make scalability & per- 
formance improvements on Avici 
router product by implementing 
proprietary solutions & IETF (In- 
ternet Engineering Task Force) 
proposed extension to the proto 
cols. Will work closely with ATM 
Frame-Relay, & PPP media & 
address interoperability issues 
with Cisco & Juniper routing ven- 
dors. Aliso responsible for s 


maintenance of 


degree 

r losely related fi 
y’s experience in jc 
IP software de pment 
of this, will accept Master's de: 
gree in Electr. Eng’g/Computer 
Science & 2 yrs exper. Requires 
demonstrated expertise in d 
oping routing prot s 
ISIS, BGP-MPLS, VPivs); imple- 
menting router performance & 
scalability solutions; C & 
Juniper routing behavior 
dress nteroperability Sssues 
and, Real-time Embedded Sys- 
tems & Vxworks Op ing Sys 
tems. 40_ hrs/wk; 8a-5p (M-F 
$85,072/yr ubmit resume in 
duplicate 
Labor Exchang 
Staniford St, 1st fl 


02114. EOE 


to: Case 


Required a suitable candidate 
with more than five years of 
experience in the IT ustry 
Responsible for systern analy 
sis, design, developmen var. 
ious B2B applications. Required 
BS in CS and experience 
compiex dist ited internet 
architecture veloping and 
implemen yusiness systems 
on the we strong back 
ground in business analysis 
along with proficiency in J2EE 
ncluding JSP 
SP, EJB, JDBC, JMS 
JAX. Prior working knowl 
edge of OOA and O 
UML. Proven track rec 
essary. 40 hrs/wk, 9:00-5:00 
F, $31.25 pe as needed 
Apply with 
Dept, Pan 
Inc., PO Bo 
10523-08' 


SENIOR PROGRAMMER/ANA; 
LYST to analyze, design, devel 
op, test, implement and support 
application software, workflows 
interfaces in SAP/R3 using 
st, RFCs. 
IDOCs, BAPIs and ALEs 
UNIX and Windows platforms. 
Require: B.S. degree in Comp- 
uter Science, an Engineering 
discipline, or a closely 
field with 2 yrs of exp in the job 
offered or as a Software 
Engineer. Extensive travel on 
assignment to various client 
sites within the U.S. is required 
Competitive salary offered 
Apply by resume Ravi 
Kandimalla, Everest Computers 
Inc., 900 Old Roswell Lakes 
Pkw, Ste 300, Roswell, GA 
30076; Attn: Job VC 


Full-time Programmer Analyst 
Must have a Bachelors Degree 
in Computer Science or related 
field. Foreign degree equivalent 
accepted. Educational or work 
background must have included 
the following skills: “Promising 
Related” Oracle Applications 
Oracle Applications 11i, SQL 
Report Writes, Unix, MSQ! 
Oracie ERP applications inciud- 
ing the following OMS, APS 
(GATP/SCP), PL/SQL, C, Peri 
MQSeries and XML. Salary 
Competitive. Send resume to: 
Robbin Lee, UPS SCS, 12380 
Morris Rd, Alpharetta, GA 
30005. Employer will not spon- 
sor visas for this position. 


Join Citrix, a cutting-edge team that 
S setting new benchmarks for suc- 
cess and a ny that has earn 


ed a reputation market leader! 


Software Dev. Engineers/Software 
Engineers - Research, design & 
develop multiuser software applica 
tions based 

web tech 

avai 


write & 
ases for 
applica 


Must h 
ust have 


t pass compa: 
eview. Forward 


tems. 
reek Rd 


Reference 


Computer Systems Adm'r 
resp for sys. adm & apps dev 
Study & analyze existing sys 
implement changes. BS in CS. 
MIS or any eng’g rel 

exp. or 2 yrs. exp 
adm/analysis rel. Must have 
working knowledge of NIS 
NFS & DNS. Must be able to 
work on Oracle inst. & perform 
db activities. Multipie pos avail 
Multiple job sites, will change to 
other unanticipated sites in US 
as req. FT. Send res. to 
Advansoft, 1807 Carraige Ct 
Addison, it 60101. Legal rt to 
work in US must be stated 
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Microsoft — 


by developing valued-added 
products that will fall under 
the System Center banner. 

System Center will combine 
Microsoft’s two main manage- 
ment offerings, Systems Man- 
agement Server and Microsoft 
Operations Manager. A suite 
that bundles them is due next 
year, and the fully integrated 
product is targeted for 2006 or 
later, said David Hamilton, di- 
rector of Microsoft’s enter- 
prise management division. 

But Microsoft has kept its 
Web services management 
plans under wraps. Hamilton 
said Microsoft has been meet- 
ing with customers to try to 
get an understanding of their 
needs in that area and assess 
how those needs may differ 
from traditional client/server 
management issues. 

“Our desire is really to try 
and find the customer pain 
point before we jump into the 
middle of Web services man- 
agement,” Hamilton said. He 
said short-term issues may be 
addressed next year in the 
System Center suite, and long- | 
term user needs will be tack- 
led later in the integrated 
product. 

Until now, small vendors 
that focus on varying aspects 
of Web services management 
have done much of the cus- 
tomer courting. But by year’s 
end, CA’s Unicenter Web Ser- 
vices Distributed Management 
and HP’s OpenView Web Ser- 
vices Management Engine 
should be ready. IBM’s Tivoli 
division and BMC Software 
Inc. also have been adding 
Web services capabilities to 
existing offerings. 

It’s unclear how much those 
vendors’ head starts will hurt 
Microsoft. An IT architect at a 
manufacturing company that 
has been building Web ser- 
vices using Microsoft tools 
said his team had to move 
ahead with products that are 
working now. He said he will | 





have to carefully evaluate Mi- 
crosoft’s offerings. 

“The real question will be 
the maturity. The start-ups out 
there are really galloping 
away,” said the IT architect, 
who asked not to be identi- 
fied. “But everybody is at least 


1 ° : 
going to have to pay attention 


to what Microsoft offers. 
When that elephant steps in 
the room, it doesn’t matter 
how many mice have stepped 
in the room before [it].” 

Few companies have built 
so many Web services that 
they have begun seeking tools 
to manage them. Analysts said 
demand is just starting to 
emerge, and they don’t expect 
it to become widespread for 
another year or two. 

Christopher Casgar, a senior 
architect at Wipro Ltd., said 
the firm’s Newton, Mass.- 


Continued from page 1 


nization for the Rights of 
American Workers (TORAW) 
in Meriden, Conn., was 
formed less than a year ago. 
One of the group’s founders, 
James Pace, a laid-off iT con- 
sultant, learned the ropes of 
activism in the early 1970s, 
when he fought the state’s mo- 
torcycle helmet law. “It all 
comes down to backyard poli- 
tics,” said Pace. 

Among other activities, 
TORAW attended an open fo- 
rum meeting that Rep. Nancy 
Johnson held in her Connecti- 
cut district several months 
ago. Six TORAW members in 
the audience peppered John- 
son with questions about the 
visa programs. “We took over 
the whole meeting,” said Pace. 
Subsequent local newspaper 
coverage focused on offshore 
outsourcing. 

On July 28, Johnson, a Re- 
publican, joined Democratic 
Sen. Christopher J. Dodd of 
Connecticut in sponsoring the 
USA Jobs Protection Act to re- 
form the visa laws. 





| contend the program 





| based NerveWire division has 


been building Web services 
for companies in the financial, 
manufacturing and retail in- 
dustries. But clients are just 
“kicking the tires” when it 


| comes to Web services man- 


agement, he said. 

William Norman, assistant 
vice president of research and 
presentation services at Op- 
penheimerFunds Inc. in New 


| York, said his company has 


found the management capa- 
bilities of its application serv- 
er from BEA Systems Inc. to 
be sufficient to manage its 
dozen internal Web services. 
Likewise, John Morrison, 


| CIO at Motor Coach Indus- 


tries Inc. in Schaumberg, IIL., 
said his company uses its IBM 
WebSphere application server 


| and homegrown tools to man- 
| age its Web services and has 


In a hearing late last 
month on the L-1 visa, 
Dodd said that from 
1997 to 2000, some 


| 3.4 million H-1B and 


L-l visas were ap- 
proved, 70,000 in Con- 
necticut alone. Dodd 


| said a growing body of 
| anecdotal evidence 


suggests abuse. 
The L-1 allows com- 
panies to transfer for- 


| eign employees with 


specialized skills into 
the U.S. But critics 


brings in foreign re- 
placements who will 


| be trained to take over 


IT jobs held by U.S. citizens. 

The H-1B, a visa that lets 
firms bring skilled workers 
into the U.S. for up to six years, 
is also a hot issue. But its cap 


will shrink from 195,000 to 


65,000 in October; the L-1 has 


| no cap, though DeLauro’s bill 


would impose a 35,000 limit. 
One day after Dodd and 
Johnson introduced their bills, 
the Information Technology 
Association of America re- 
leased a memorandum sug- 
gesting L-] program reforms, 


COMPUTERWORLD August 1,200 49 





HP’s OpenView and Tivoli 
products for overall systems 
management. He said he does- 
n’t see the management of 
Web services as separate from 
other management needs. 
“The ideal world is that they 


and keep it all at the same 

price,” Morrison said. “But [of- 

fering] separate products is not 

bad, depending on how they’re 
going to license and price it.” 

| Carroll Pleasant, an associ- 

ate analyst in the emerging 

technologies group at East- 

| man Chemical Co. in Kings- 

port, Tenn., said there’s no 

| consensus about what a Web 

| services management tool 

| should do. So far, his company 

has seen a need to manage the 

security model, the orchestra- 

tion between Web services, 

| the debugging and monitoring 





Wt a MPO MO PMN Ue ecw oe BU 
TORAW’s fight for L-1 and H-1B visa reform. 


including the visa’s require- 
ment that employees have 
some “specialized knowl- 


restrictive definition of what 
specialized knowledge entails. 
Legislative restrictions such 
as those imposed in DeLauro’s 
bill would hurt the ability of 
U.S. firms “to move people 
around globally,” said Jeff 
Lande, a vice president at the 
Arlington Va.-based ITAA. 
Offshore work is a hot issue 
| in other states as well, but Con- 





include it all in one big package | 


edge.” The ITAA wants a more | 





| of services, fail-over capabili- 


ties, caching and data transfor- 
mation. But Pleasant said he 
found a set of confusing choic- 


| es from small start-ups when 
| he looked for a vendor. 


Corey Ferengul, an analyst 
at Meta Group Inc., said the 
major vendors are investing in 
Web services management 
standards before they make a 
more serious foray into the 


space. CA, HP and IBM are all 


involved in work with the Or- 


| ganization for the Advance- 


ment of Structured Informa- 
tion Standards. 
“We haven’t done a very 


| good job of managing tradi- 


tional client/server applica- 
tions,” said Cameron Haight, 
an analyst at Gartner Inc. 


“Now Web services applica- 


tions take that to yet another 
layer of complexity.” D 


necticut is known for 
its high wages and a 
heavy concentration of 
financial services 
firms, which are major 
offshore users. 

Donald Klepper- 
Smith, chief economist 
at consulting firm Scil- 
lia Dowling and 
Natarelli LLC in New 
Haven, Conn., said 
Connecticut employ- 
ers face a cost of doing 
business that’s 12% 
higher than the nation- 
al average. The state 
has shed 46,000 jobs 
since mid-2000, out of 
an employment base 


| of about 1.65 million. “Basical- 
| ly, we’re flat-lining in the state 
| of Connecticut,” he said. 


Pace, who said TORAW co- 
founder John Bauman also de- 
serves credit for the group’s 
success, realizes that the pro- 
visions in some of the bills 
won't appease all critics. But 
the chief goal is to get legisla- 


| tors to work together. Mean- 


while, TORAW is recruiting 
members outside of Connecti- 
cut. “I know we can do it in 
other states,” said Pace. D 
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Details, Details ... 


HEARD RECENTLY FROM THE SCO GROUP’S PR director about 
my July 28 column [“SCO’s Shell Game,” QuickLink 40134]. 
“Your article was all correct except for one part,” wrote Blake 
Stowell. “You wrote that ‘[SCO] threatened darkly that if 
someone didn’t start buying Unix licenses soon, it would sue 
Linus Torvalds.’ That phrase comes from an article that CBS Market- 
Watch published a few months back after doing an interview with 
Darl McBride, president and CEO of SCO. I called that editor back 
and was adamant that Darl McBride had never said that. ... He 
looked back over his notes and agreed that Darl never said that and 
made a correction to remove that phrase or sentence.” 
For the record, MarketWatch.com has issued no such correction, 


and that sentence is still in the May 28 story in 
the archives on MarketWatch’s Web site. 

Still, it’s nice to know SCO agrees that every- 
thing else in my column was correct. But SCO 
seems to be having a devil of a time getting the 
details right lately. 

And details are about to become a much big- 
ger issue for SCO, now that Red Hat has sued 
SCO for interfering with its Linux business (see 
story, page 14). 

Last week Red Hat asked a federal court to 
issue a declaratory judgment that it hasn’t in- 
fringed on SCO’s copyrights or trade secrets. 
It’s like a copyright infringement lawsuit turned 
inside out: Instead of SCO’s threatened suits to 
declare Linux users guilty of infringement, this 
is a suit to have Linux declared innocent. 

Full disclosure: Two Computerworld columns 
I wrote are quoted in the Red Hat lawsuit, as 
are comments from analysts at Gartner, Illumi- 
nata, Deutsche Bank and Merrill Lynch. How- 
ever, I have no legal, financial or personal con- 
nection with Red Hat. Its lawyers 
haven't talked to me. They didn’t 
even spell my name right. 

But I can already guess that Red 
Hat’s argument will go like this: 

None of the code in Linux is ille- 
gally similar to Unix code. 

But even if it is similar, that simi- 
larity isn’t the result of copying. 

But even if it is the result of copy- 


But even if SCO does own the Unix copy- 
rights, SCO forfeited control of any code in Lin- 
ux when it shipped Linux products under the 
General Public License (GPL). 

But even if SCO didn’t forfeit that control un- 
der the GPL, the Unix code wasn’t used illegally 
because the generic functions it implements 
aren’t protected by copyright. 

That’s a lot of “even ifs.” And if that sounds 
like a lot of weaselly legalese — can’t these 
guys make up their minds on an argument? — 
that’s just the way a case for a declaratory judg- 
ment is structured. Every “even if” represents a 
condition that must be met for there to be copy- 
right infringement. 

So to protect its infringement claims, SCO 
will have to show the court that its claims can 
pass every one of those “even if” tests. 

That means that in the days to come, we'll get 
lots of details on the disputed Linux code and 
SCO’s legal theories — details that have been 
sorely lacking in SCO’s claims over the past six 

months or so. 

It also means that Linux develop- 
ers will finally have an opportunity 
to learn exactly what they’re being 
accused of — and get a chance to 
clean it up to make Linux street- 
legal. Assuming there really is any 
Linux code that infringes on Unix 
copyrights. 

That’s probably not the endgame 
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It Just Never Stops 


Why is this print queue so backed up? wonders IT pilot 
fish. Turns out users at a remote site have made the 
printer vanish from the network. “When we called them, 
they explained to us that they had placed the discon- 
nected printer in a storage closet,” fish groans. “They 
thought that would stop the printing and never bothered 
to call IT to stop transmitting the documents.” 
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version team 


TANK. srtsty 
writing pro- 
? grams to convert data 
: from the old, unknown 
: system to the new, un- 
: says, “I never did ask 
i to see any of their pro- 
? grams or test data.” 


? Senior VP asks IT pilot 
? fish to generate a data 
? model for some consul- 
: he has the company’s 

: only license for the mod- 
i generates a proprietary 
: file format. But he can 
? provide a printout of the 
: model. “Fine,” says the 
: VP. “But perhaps you 

: could e-mail it to the 

: consultants as well.” 


: User has gotten her third 
: replacement monitor in 
: as many months, so sup- 
? port pilot fish checks it 
: out ~ and finds water 

? under the monitor, but 

: no source of a leak. The 
: Next day, he’s walking by 
: and catches the user's 

: new secretary in action. 
: “t explained to her that 


mae 
building a fac- 
tory for a joint 


not documented at all,” “fh "And that maybe 
fish reports. “The new ? watering an artificial 
system was still in de- : plant wasn’t the best use 
sign.” But the eight- i ? of her time either.” 
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» FEED THE SHARK! Send your true tale of T life to 


ing, the code wasn’t copied from 
Unix source code. 

But even if it was copied from 
Unix, SCO doesn’t properly own 
copyrights for Unix source code. 


maaan Compiaar SCO would prefer — it won't help 
world’s senior news colum-  SCO’s stock price at all. But as SCO 
nist, has covered i} formore hopes to cash in on its threats to 
than 20 years. Contact him at Linux, the devil really may be in 
the details. D 


sharky@computerworld.com. You snag a snazzy — 
Shark shit if we use it. And check out the daly feed, browse ¢ 
ibaa -siohage ts home delivery at 








Got Questions About 
Business Intelligence? 


Computerworld’s IT Executive Summit 


Has the Answers 


If you’re an IT executive* in an end-user organization, 
apply to attend one of Computerworld’s upcoming 


complimentary one-day summits on Business Intelligence. 


Neither a product nor a system, Business Intelligence (Bl) 
is an architecture — a collection of interrelated operational 
and business performance measurement applications 
and databases. 


The only way to succeed with BI applications is to under- 
stand their complexity, their cross-organizational nature, 
the needs of knowledge workers, your competition, your 
market, and customer trends. 


This summit will give you a comprehensive, one-day 
overview — and will arm you with the latest thinking and 
tools to make the right investments in BI. 


*Complimentary registration 
is restricted to qualified 
IT executives only. 


eT New York City 


September 23, 2003 


8:00am to 3:00pm 
Hilton New York 
1335 Avenue of the Americas 


San Francisco 


September 25, 2003 
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= The Fairmont San Francisco 
950 Mason Street (Nob Hill) 


Why you should attend 

¢ Arich program focused solely on Business Intelligence 
¢ Emceed by Maryfran Johnson, Editor in Chief 

¢ Peer networking time during breakfast and lunch 


¢ Case studies delivered by IT-user executives who 
have successfully implemented Business Intelligence 


Perspectives from author and expert Shaku Atre 
Panel of IT-user executives sharing real-life experiences 


Apply for registration today 
For more information or to apply, visit 
www.itexecutivesummit.com/bi 


Exclusively sponsored by: 


sas. intel 
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Oracle 


42,000 Employees 


3 Oracle Email Database Servers 
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REGISTER NOW AND SAVE 
:7\eis September 7-11, 2003 

San Francisco, California 

oracle.com/oracleworld 


Source for Microsoft Data 
Keynote presentation by Microsoft ClO 
at NRFtech IT Leadership Summit on August 12, 2002 


Microsoft 
50,000 Employees 


110 Microsoft Exchange Servers 


Source: Microsoft ClO 


Unless you have as much money as Microsoft, 


you may want to use Oracle for email 
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